CVE-2026-21837 | HCL Digital Experience 9.5 Digital Asset Management API os command injection (KB0130849)

A vulnerability categorized as critical has been discovered in HCL Digital Experience 9.5. This vulnerability affects unknown code of the component Digital Asset Management API. Executing a manipulation can lead to os command injection.

This vulnerability is handled as CVE-2026-21837. The attack can be executed remotely. There is not any exploit available.