CVE-2026-21824CWE-266
A privilege escalation vulnerability affects HCL Commerce
High · published July 20, 2026
What it is
HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.
The record
Technical detail
- CVSS v3.1
- 8.8 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00424 · 35.7th percentile
- Weakness
- CWE-266 · Incorrect Privilege Assignment
- Published
- 2026-07-20T15:04Z
EPSS history
Timeline