CVE-2026-21837highCWE-78

CVE-2026-21837: fallo de gravedad alta en HCLSoftware Digital Experience

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Digital Experience

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.9%
HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.  An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
HCLSoftware · Digital Experience
CVEs relacionadas — HCLSoftware Digital Experience

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-67075MEDIUMHCL Digital Experience is affected by improper input sanitationEPSS 0.2%CVE-2025-62326MEDIUMHCL Digital Experience is susceptible to stored cross-site scripting (XSS)EPSS 0.2%