VULNERABILITY INTELLIGENCE

CVE-2026-21759

CVSS score4.3 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-08-24
Last modified2026-10-12

Description

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.