CVE-2026-21811 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-21811?
CVE-2026-21811 is a low-severity vulnerability in HCL Software AppScan Integration with Azure Boards for ASoC & A360, published on 22 Oct 2026.
Official description
HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable dumps, or build agent scripts, despite being masked in the user interface.
Weakness: CWE-522
Which versions are affected by CVE-2026-21811?
How do I fix CVE-2026-21811?
No fix has been published for CVE-2026-21811 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-21811 being exploited?
There is no known exploitation of CVE-2026-21811 in the wild and no public exploit code.
Sources
Also known as GHSA-c8p7-j7hh-mm95.