AWS SDK Package Vulnerability in HCL BigFix AEX
CVE-2026-21830

3.7LOW

Key Information:

Vendor: HCL Software Software
Status: Bigfix Aex
Vendor: CVE Published:; 28 October 2026

🔔 Create HCL Software Software Vulnerability Alert

What is CVE-2026-21830?

A vulnerability exists within the HCL BigFix AEX product due to a flaw in the aws-sdk package. This flaw could lead to AWS API requests being inadvertently routed to unintended or non-AWS endpoints, posing a risk of data exposure and potential exploitation by malicious actors. Users of HCL BigFix AEX should implement recommended security practices to mitigate risks associated with this vulnerability.

Affected Version(s)

BigFix AEX V13.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:

3.7

Severity:

LOW

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 28, 2026
Vulnerability Reserved
Jan 5, 2026

CVE-2026-21830 Data

JSON