CVE-2026-21830: HCL BigFix AEX is affected by multiple security vulnerabilities.
Published Oct 28, 2026
·Updated
HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.
Affected Software
1 affected component
HCL BigFix AEX
Event History
Oct 28, 2026
CVE Published
via MITRE·12:37 PM
Data Sourced
via MITRE·12:37 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What could exploitation allow an attacker to do?
The vulnerability may cause AWS API requests to be sent to unintended or non-AWS endpoints. The provided assessment indicates low severity, with potential confidentiality impact but no stated integrity or availability impact.
2
Does exploitation require authentication or user interaction?
The provided vector indicates that no privileges and no user interaction are required. It also rates attack complexity as high, so exploitation depends on conditions not specified in the available data.