CVE-2026-67080
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Oct 28, 2026
CISA due date
—
The record
HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62979 jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. CWE-209
- CVE-2026-118643 n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential… CWE-209
- CVE-2026-118272 A vulnerability was detected in a2ui-project a2ui up to 0.10.6. CWE-209
- CVE-2026-108316 Tanium addressed an information disclosure vulnerability in Tanium Server. CWE-209
- CVE-2026-116478 A vulnerability was detected in a2aproject a2a-go up to 2.4.0. CWE-209
- CVE-2026-116479 A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. CWE-209
- CVE-2026-116477 A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. CWE-209
- CVE-2026-114348 webpack-dev-server is a development server that provides live reloading for webpack… CWE-209