HIGHCVSS v3.1 8.6Vulnerability

CVE-2026-67073

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized access, or system compromise.

Properties

Severity
HIGH
Nvd fetched at
2026-10-28T15:40:15.054286+00:00
Cvss severity
HIGH
Cvss score
8.6
Retrieved at
2026-10-28T15:41:17+00:00
Score
8.6
Cvss version
3.1
Last source
NVD
Cve id
CVE-2026-67073
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
First seen by Signal
2026-10-28T15:41:17+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Published at
2026-10-28T13:17:08.283
Last modified
2026-10-28T14:05:59.757

Related Entities (4)

HAS_WEAKNESS (4)

→[Weakness]Unrestricted Upload of File with Dangerous Type
→[Weakness]Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
→[Weakness]Improper Access Control
→[Weakness]Files or Directories Accessible to External Parties

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-67073 (CVSS v3.1 8.6) — Ninja Signal Threat Intelligence | Ninja Signal