PT-2026-27498 · Hcl · Hcl Traveler

Published 2026-03-24 · Updated 2026-03-25 · CVE-2026-21790

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions HCL Traveler (affected versions not specified)

Description HCL Traveler is affected by a weak default HTTP header validation issue. This could allow an attacker to bypass additional authentication checks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2026-21790

Affected Products

Hcl Traveler

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-21790 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129139 · Note
• https://twitter.com/VulmonFeeds/status/2036613445496242496 · Twitter Post