{"id":"CVE-2026-67079","aliases":[],"cve":{"records":[{"id":"CVE-2026-67079","source":"HCL","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-28T13:24:14.282Z","published":"2026-10-28T12:25:55.234Z","modified":"2026-10-28T12:25:55.234Z"}],"publishers":[{"name":"HCL","role":"CNA","organizationId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","modified":"2026-10-28T12:25:55.234Z"}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281","tags":[],"source":"HCL"}],"weaknesses":[{"id":"CWE-1021","description":"CWE-1021 Improper Restriction of Rendered UI Layers or Frames","source":"HCL"}],"applicability":[],"prioritization":[]},"title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","titleSource":"HCL","descriptionSource":"HCL","description":"HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.","score":6.4,"severity":"medium","published":"2026-10-28T12:25:55.234Z","modified":"2026-10-28T12:25:55.234Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"HCL Software","name":"BigFix AEX","platforms":[],"versions":[{"version":"v13.0.0.1","status":"affected"}],"defaultStatus":"unaffected","cpes":[],"source":"HCL","url":"https://www.cve.org/CVERecord?id=CVE-2026-67079"}],"remediation":[],"references":["https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281"],"sources":[{"name":"CVE","id":"CVE-2026-67079","modified":"2026-10-28T12:25:55.234Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-67079"}],"assessments":[{"source":"HCL","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L","score":6.4}],"sourceAffected":[],"observedAt":"2026-10-29T14:42:33.597Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T07:10:30.687Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"HCL BigFix AEX v13.0.0.1 has a Clickjacking vulnerability, which could allow an attacker to trick users into performing unintended actions. The attacker needs to embed the application within a malicious web page or iframe. This may lead to unauthorized transactions or account changes.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:43:28.995Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-67079"}]}}