CVE-2026-21830

CVSS 3.7 (low) · published 2026-10-28

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.

Weakness: CWE-20

Source: NVD CVE-2026-21830

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134884

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.