HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection
CVE-2026-21826

6.1MEDIUM

Key Information:

Vendor

HCL Softwaresoftware

Status
Digital Experience & Dx Compose
Vendor
CVE Published:
5 June 2026

What is CVE-2026-21826?

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Host header and cause the application to behave in unexpected ways.

Affected Version(s)

Digital Experience & DX Compose 9.5

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.