CVEvulnerability
CVE-2026-21754
5.4 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-08-25
- Last modified
- 2026-09-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-1004
Description
HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications.
Related
Weakness · CWE (1)
- CWE-1004 Sensitive Cookie Without 'HttpOnly' Flag weakness
References
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133342 support.hcl-software.com