PT-2026-41722 · Hcl · Hcl Connections

Published 2026-05-18 · Updated 2026-05-20 · CVE-2026-21789

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL Connections (affected versions not specified)

Description Broken access control may allow an unauthorized user to update data in certain scenarios.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-21789

Affected Products

Hcl Connections

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-21789 · Security Note
• https://t.me/CVEtracker/54163 · Telegram Post
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129719 · Note
• https://twitter.com/infoflowcloud/status/2056994914043396312 · Twitter Post
• https://twitter.com/CVEnew/status/2056994231961694392 · Twitter Post