CVE Watch24 ago 2026

CVE-2026-21756

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, ma

CVSS

7.2

Alto

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 24 ago 2026 · Última mod.: 24 ago 2026 · CWE-266

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.

Referencias oficiales

support.hcl-software.comhttps://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-782679.8 CRÍ

—

——0Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.22h CVE-2026-325618.8 ALT

—

——0Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.12h CVE-2026-666489.8 CRÍ

—

——0Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.1d CVE-2026-325589.8 CRÍ

—

——0Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.1d CVE-2026-281659.8 CRÍ

—

——0Unauthenticated Privilege Escalation in Digits <= 9.2 versions.1d CVE-2026-781586.3 MED

11.0%

——3A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely.1d