What is CVE-2026-21756?

CVE-2026-21756 is a high-severity vulnerability in Hclsoftware Hcl Hive, classified under Incorrect Privilege Assignment. CVSS score: 7.2/10. Published 2026-08-24.

How severe is CVE-2026-21756?

High severity. CVSS v3 base score is 7.2 out of 10.

Privilege escalation in Hclsoftware Hcl Hive

CVE-2026-21756

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hclsoftware Hcl Hive — versions 1.0

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment

References

psirt@hcl.com

Frequently asked questions

What is CVE-2026-21756?: CVE-2026-21756 is a high-severity vulnerability in Hclsoftware Hcl Hive, classified under Incorrect Privilege Assignment. CVSS score: 7.2/10. Published 2026-08-24.
How severe is CVE-2026-21756?: High severity. CVSS v3 base score is 7.2 out of 10.