What is CVE-2026-21754?

CVE-2026-21754 is a medium-severity vulnerability, classified under Sensitive Cookie Without 'HttpOnly' Flag. CVSS score: 5.4/10. Published 2026-08-25.

How severe is CVE-2026-21754?

Medium severity. CVSS v3 base score is 5.4 out of 10.

CVE-2026-21754

CVE-2026-21754

HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N.

Weakness classification (CWE)

CWE-1004 — Sensitive Cookie Without 'HttpOnly' Flag

References

psirt@hcl.com

Frequently asked questions

What is CVE-2026-21754?: CVE-2026-21754 is a medium-severity vulnerability, classified under Sensitive Cookie Without 'HttpOnly' Flag. CVSS score: 5.4/10. Published 2026-08-25.
How severe is CVE-2026-21754?: Medium severity. CVSS v3 base score is 5.4 out of 10.