VULNERABILITY INTELLIGENCE

CVE-2026-21826

CVSS score6.1 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-06-05
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Host header and cause the application to behave in unexpected ways.

Weakness classification

  • psirt@hcl.com: CWE-601

Primary references