CVE-2026-21756
Received Received - Intake

Broken Access Control in HCL Hive

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: HCL Software

Description
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-24
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2026-21756
EUVD
EUVD-2026-64840

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hcl hive *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

HCL Hive has a broken access control vulnerability that lets attackers or unauthorized users inject unverified, malicious, or broken code into production environments. This could lead to unauthorized changes or disruptions in the system.

Detection Guidance

The provided CVE details do not include specific detection methods or commands for identifying this vulnerability on a network or system. It is recommended to review the HCL Hive documentation or contact HCL support for guidance on detection procedures.

Impact Analysis

This vulnerability could allow attackers to modify code, steal data, or disrupt operations. Unauthorized code changes might lead to system failures, data breaches, or compliance violations.

Compliance Impact

This vulnerability could lead to unauthorized data access or modifications, violating GDPR (data protection) and HIPAA (health data privacy). Non-compliance risks fines, legal penalties, and reputational damage.

Mitigation Strategies

Apply the security patches or updates provided by HCL for Hive as soon as possible. Review and restrict access controls to prevent unauthorized code introduction. Monitor HCL's security bulletins for further guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21756. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart