CVE-2026-21822: A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).
Published Sep 18, 2026
·Updated
HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized file modification within the application's directory scope.
Affected Software
1 affected component
HCLSoftware HCL AppScan 360°
Event History
Sep 18, 2026
CVE Published
via MITRE·08:32 AM
Data Sourced
via MITRE·08:32 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
An attacker must be authenticated to HCL AppScan 360° and needs network access. No user interaction is required.
2
What could an attacker do through the vulnerable component?
The issue may allow reading or writing files outside the intended directory through ASReportService. This can expose file system structure information or permit unauthorized modification of files within the application's directory scope.