CVE-2026-21759CWE-215

CVE-2026-21759

Medium · published August 24, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.7th percentile
Weakness
CWE-215 · Insertion of Sensitive Information Into Debugging Code
Published
2026-08-24T17:17Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731 · [email protected]
EPSS history
Timeline
  • 26 AUG 07:41Z
    EPSS moved — → 0%
    epss
  • 24 AUG 12:10Z
    HCL Hive is affected by an information exposure vulnerability
    cvelistv5