Medium severity6.1NVD Advisory· Published Jun 5, 2026· Updated Jun 10, 2026
CVE-2026-21826
CVE-2026-21826
Description
HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection. An attacker can manipulate the Host header and cause the application to behave in unexpected ways.
Affected products
69cpe:2.3:a:hcltech:digital_experience:9.5:-:*:*:*:*:*:*+ 54 more
- cpe:2.3:a:hcltech:digital_experience:9.5:-:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf17:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf171:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf172:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf173:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf18:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf181:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf182:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf183:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf184:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf19:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf191:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf192:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf193:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf194:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf195:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf196:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf197:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf198:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf199:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf200:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf201:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf202:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf203:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf204:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf205:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf206:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf207:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf208:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf209:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf210:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf211:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf212:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf213:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf214:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf215:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf216:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf217:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf218:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf219:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf220:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf221:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf222:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf223:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf224:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf225:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf226:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf227:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf228:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf229:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf230:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf231:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf232:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf233:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience:9.5:cf234:*:*:*:*:*:*
cpe:2.3:a:hcltech:digital_experience_compose:9.5:-:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:-:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf224:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf225:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf226:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf227:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf228:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf229:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf230:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf231:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf232:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf233:*:*:*:*:*:*
- cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf234:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- support.hcl-software.com/csmnvdVendor Advisory
News mentions
0No linked articles in our index yet.