CVE-2026-21759: HCL Hive is affected by an information exposure vulnerability
Published Aug 24, 2026
·Updated
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.
Affected Software
1 affected component
HCL Hive=
Event History
Aug 24, 2026
CVE Published
via MITRE·12:10 PM
Data Sourced
via MITRE·12:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can access the exposed API documentation?
The Swagger documentation is publicly exposed and can be accessed by unauthenticated users.
2
Does the exposed documentation contain credentials or personal data?
No sensitive information, including credentials or PII, was discovered in the exposed Swagger documentation.
3
What does an attacker need to exploit this issue?
An attacker needs network access to the publicly reachable Swagger documentation and user interaction is required according to the supplied vector.