HCL BigFix AEX suffers from a critical remote code execution vulnerability (CVE-2026-67074) that allows attackers with high privileges to execute arbitrary code without user interaction. This can lead to full system compromise, including unauthorized access and data exposure.