Low severity3.7NVD Advisory· Published Oct 28, 2026

CVE-2026-21830

Description

HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API requests to be sent to unintended or non‐AWS endpoints.

Affected products

HCL Software/BigFix AEXllm-create

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvd

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000