CVE-2026-21812 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-21812?
CVE-2026-21812 is a low-severity vulnerability in HCL Software AppScan Integration with Azure Boards for ASoC & A360, published on 22 Oct 2026.
Official description
HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.
Weakness: CWE-319
Which versions are affected by CVE-2026-21812?
How do I fix CVE-2026-21812?
No fix has been published for CVE-2026-21812 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-21812 being exploited?
There is no known exploitation of CVE-2026-21812 in the wild and no public exploit code.
Sources
Also known as GHSA-8v94-rq6m-32gh.