CVE-2026-21837 — HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API

CVE-2026-21837

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API PUBLISHED

Description (CNA)

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / Digital Experience	affected 9.5

CWE

CWE-78

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130849

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.