Medium severity6.3NVD Advisory· Published Nov 6, 2026

CVE-2026-65022

Description

The MDM App Catalog / App Store preview does not properly sanitize or encode user-supplied HTML before rendering it. Injected HTML can be displayed to users who view the preview, which may allow cross-site scripting (XSS) when a user interacts with the crafted content.

Affected products

HCL Software/MDM App Catalogllm-create

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000