What is CVE-2026-21766?

CVE-2026-21766 is a medium-severity vulnerability in Hclsoftware Hcl Digital Experience And Compose, classified under Insufficiently Protected Credentials. CVSS score: 5.4/10. Published 2026-08-05.

How severe is CVE-2026-21766?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Information disclosure in Hclsoftware Hcl Digital Experience And Compose

CVE-2026-21766

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server…

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N.

Affected products

Hclsoftware Hcl Digital Experience And Compose — versions 9.5

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials
CWE-532 — Insertion of Sensitive Information into Log File

References

psirt@hcl.com

Frequently asked questions

What is CVE-2026-21766?: CVE-2026-21766 is a medium-severity vulnerability in Hclsoftware Hcl Digital Experience And Compose, classified under Insufficiently Protected Credentials. CVSS score: 5.4/10. Published 2026-08-05.
How severe is CVE-2026-21766?: Medium severity. CVSS v3 base score is 5.4 out of 10.