CVE-2026-21826

EUVD-2026-34787
HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Host header and cause the application to behave in unexpected ways.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Affected Products (NVD)
VendorProductVersion
hcltechdigital_experience_compose
9.5
hcltechdigital_experience_compose
9.5:cf224
hcltechdigital_experience_compose
9.5:cf225
hcltechdigital_experience_compose
9.5:cf226
hcltechdigital_experience_compose
9.5:cf227
hcltechdigital_experience_compose
9.5:cf228
hcltechdigital_experience_compose
9.5:cf229
hcltechdigital_experience_compose
9.5:cf230
hcltechdigital_experience_compose
9.5:cf231
hcltechdigital_experience_compose
9.5:cf232
hcltechdigital_experience_compose
9.5:cf233
hcltechdigital_experience_compose
9.5:cf234
hcltechdigital_experience
9.5
hcltechdigital_experience
9.5:cf17
hcltechdigital_experience
9.5:cf171
hcltechdigital_experience
9.5:cf172
hcltechdigital_experience
9.5:cf173
hcltechdigital_experience
9.5:cf18
hcltechdigital_experience
9.5:cf181
hcltechdigital_experience
9.5:cf182
hcltechdigital_experience
9.5:cf183
hcltechdigital_experience
9.5:cf184
hcltechdigital_experience
9.5:cf19
hcltechdigital_experience
9.5:cf191
hcltechdigital_experience
9.5:cf192
hcltechdigital_experience
9.5:cf193
hcltechdigital_experience
9.5:cf194
hcltechdigital_experience
9.5:cf195
hcltechdigital_experience
9.5:cf196
hcltechdigital_experience
9.5:cf197
hcltechdigital_experience
9.5:cf198
hcltechdigital_experience
9.5:cf199
hcltechdigital_experience
9.5:cf200
hcltechdigital_experience
9.5:cf201
hcltechdigital_experience
9.5:cf202
hcltechdigital_experience
9.5:cf203
hcltechdigital_experience
9.5:cf204
hcltechdigital_experience
9.5:cf205
hcltechdigital_experience
9.5:cf206
hcltechdigital_experience
9.5:cf207
hcltechdigital_experience
9.5:cf208
hcltechdigital_experience
9.5:cf209
hcltechdigital_experience
9.5:cf210
hcltechdigital_experience
9.5:cf211
hcltechdigital_experience
9.5:cf212
hcltechdigital_experience
9.5:cf213
hcltechdigital_experience
9.5:cf214
hcltechdigital_experience
9.5:cf215
hcltechdigital_experience
9.5:cf216
hcltechdigital_experience
9.5:cf217
hcltechdigital_experience
9.5:cf218
hcltechdigital_experience
9.5:cf219
hcltechdigital_experience
9.5:cf220
hcltechdigital_experience
9.5:cf221
hcltechdigital_experience
9.5:cf222
hcltechdigital_experience
9.5:cf223
hcltechdigital_experience
9.5:cf224
hcltechdigital_experience
9.5:cf225
hcltechdigital_experience
9.5:cf226
hcltechdigital_experience
9.5:cf227
hcltechdigital_experience
9.5:cf228
hcltechdigital_experience
9.5:cf229
hcltechdigital_experience
9.5:cf230
hcltechdigital_experience
9.5:cf231
hcltechdigital_experience
9.5:cf232
hcltechdigital_experience
9.5:cf233
hcltechdigital_experience
9.5:cf234
𝑥
= Vulnerable software versions