Is CVE-2026-67079 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-67079?

CVE-2026-67079 has a CVSS v3 severity of MEDIUM (6.4).

Back

CVE-2026-67079

Description

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.