CVE-2026-21759 PUBLISHED

HCL Hive is affected by an information exposure vulnerability

Assigner: HCL
Reserved: 05.01.2026 Published: 24.08.2026 Updated: 24.08.2026

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS Score: 4.3

Product Status

Vendor HCLSoftware
Product HCL Hive
Versions Default: unaffected
  • Version 1.0 is affected

References

Problem Types

  • CWE-215 Insertion of sensitive information into debugging code CWE