What’s Vulnerable › Vulnerabilities

CVE-2026-21759: HCL Hive is affected by an information exposure vulnerability

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-24 · updated 2026-10-12
• Weakness: CWE-215

Description

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.

Affected products

• HCLSoftware HCL Hive: 1.0

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731

Get alerted when CVE-2026-21759 or the next vulnerability affects your stack