CVE-2026-21837CWE-78

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API

High · published June 5, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.  An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00920 · 60.0th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-06-05T05:50Z
EPSS history
Timeline
  • 05 JUN 05:50Z
    HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API
    cvelistv5