{"id":"CVE-2026-67080","aliases":[],"cve":{"records":[{"id":"CVE-2026-67080","source":"HCL","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-28T13:24:14.282Z","published":"2026-10-28T12:25:19.455Z","modified":"2026-10-28T12:25:19.455Z"}],"publishers":[{"name":"HCL","role":"CNA","organizationId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","modified":"2026-10-28T12:25:19.455Z"}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281","tags":[],"source":"HCL"}],"weaknesses":[{"id":"CWE-209","description":"CWE-209 Generation of Error Message Containing Sensitive Information","source":"HCL"},{"id":"CWE-391","description":"CWE-391 Unchecked Error Condition","source":"HCL"},{"id":"CWE-755","description":"CWE-755 Improper Handling of Exceptional Conditions","source":"HCL"}],"applicability":[],"prioritization":[]},"title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","titleSource":"HCL","descriptionSource":"HCL","description":"HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.","score":6.5,"severity":"medium","published":"2026-10-28T12:25:19.455Z","modified":"2026-10-28T12:25:19.455Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"HCL Software","name":"BigFix AEX","platforms":[],"versions":[{"version":"v13.0.0.1","status":"affected"}],"defaultStatus":"unaffected","cpes":[],"source":"HCL","url":"https://www.cve.org/CVERecord?id=CVE-2026-67080"}],"remediation":[],"references":["https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281"],"sources":[{"name":"CVE","id":"CVE-2026-67080","modified":"2026-10-28T12:25:19.455Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-67080"}],"assessments":[{"source":"HCL","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":6.5}],"sourceAffected":[],"observedAt":"2026-10-29T14:42:33.597Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T10:50:31.656Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"HCL BigFix AEX v13.0.0.1 is affected by an Information Disclosure vulnerability due to improper handling of errors, potentially allowing attackers to obtain sensitive technical information. The vulnerability is caused by the generation of error messages containing sensitive information, unchecked error conditions, and improper handling of exceptional conditions. This could facilitate further attacks.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:43:28.618Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-67080"}]}}