CVE-2026-21756

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...

CVE-2026-21756 HCL Hive is affected by a broken access control vulnerability

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...

EUVD-2026-64840

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...

CVE-2026-21756 HCL Hive is affected by a broken access control vulnerability

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...

CVE-2026-21756

HCL Hive is affected by a broken access control vulnerability that could allow an authenticated or unauthorized user to introduce unverified, malicious, or broken code directly into production environments . The CVSS 3.1 score is 7.2 (HIGH) , with a vector requiring high privileges (PR:H), networ...

CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability in which Swagger API documentation was publicly accessible to unauthenticated users. No sensitive data (credentials, PII) was discovered, but the exposure increases the overall attack surface by revealing API structure to potential att...

EUVD-2026-64837

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

PT-2026-80822

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

PT-2026-80875

Name of the Vulnerable Software and Affected Versions HCL Hive Keycloak IAM Instance affected versions not specified Description Insufficient granularity of access control may allow an attacker to gain unauthorized access to resources. Recommendations At the moment, there is no information about ...

PT-2026-80849

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...

PT-2026-80880

HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or credential stuffing attacks, or cause a denial of service...

PT-2026-80900

Name of the Vulnerable Software and Affected Versions HCL Hive affected versions not specified Description Incorrect default permissions may allow an attacker to perform unauthorized lateral movement, achieve container breakout, and intercept sensitive internal communications. Recommendations At...

PT-2026-80903

HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws...

CVE-2026-21752: Use of Unmaintained Third Party Components

HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws...

CVE-2025-68825: Incorrect Default Permissions

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2026-21755: Improper Restriction of Excessive Authentication Attempts

HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or credential stuffing attacks, or cause a denial of service...

CVE-2025-68833: Use of a Cryptographic Primitive with a Risky Implementation

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

CVE-2026-21759: Insertion of Sensitive Information Into Debugging Code

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...