{"id":79338,"date":"2026-06-05T10:46:30","date_gmt":"2026-06-05T07:16:30","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2026-21837-hcl-digital-experience-is-affected-by-an-os-command-injection-vulnerability-in-the-digital-asset-management-api\/"},"modified":"2026-06-05T10:46:30","modified_gmt":"2026-06-05T07:16:30","slug":"cve-2026-21837-hcl-digital-experience-is-affected-by-an-os-command-injection-vulnerability-in-the-digital-asset-management-api","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2026-21837-hcl-digital-experience-is-affected-by-an-os-command-injection-vulnerability-in-the-digital-asset-management-api\/","title":{"rendered":"CVE-2026-21837 &#8211; HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API"},"content":{"rendered":"<p>CVE ID :CVE-2026-21837<\/p>\n<p>  Published : June 5, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago<\/p>\n<p>  Description :HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.\u00a0 An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise.<\/p>\n<p>  Severity: 8.7 | HIGH<\/p>\n<p>  Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID :CVE-2026-21837 Published : June 5, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago Description :HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.\u00a0 An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-79338","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/79338","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=79338"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/79338\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=79338"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=79338"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=79338"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}