CVE-2026-21824CWE-266

A privilege escalation vulnerability affects HCL Commerce

High · published July 20, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
35.7
In the wild
Unconfirmed
What it is

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.7th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-07-20T15:04Z
EPSS history
Timeline
  • 20 JUL 15:04Z
    A privilege escalation vulnerability affects HCL Commerce
    cvelistv5