Cross-Site Scripting Vulnerability in HCL Connections Software

CVE-2026-21788

What is CVE-2026-21788?

HCL Connections features a cross-site scripting vulnerability that can be exploited by an attacker to inject and execute arbitrary script code in the browser of an unsuspecting user. This exploitation may lead to the theft of cookie-based authentication credentials, compromising user accounts and potentially enabling further malicious attacks. Users are urged to apply the latest updates to protect their systems from these types of security threats.

References