CVE-2026-21754

Published: Aug 25, 2026Modified: Aug 28, 2026Deferred

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: psirt@hcl.com (Secondary)

Description

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications.

Related CWEs

CWE-1004

Sensitive Cookie Without 'HttpOnly' Flag

The product uses a cookie to store sensitive information, but the cookie is not marked with the HttpOnly flag.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133342

Source: psirt@hcl.com

Timeline

No history available yet.