Improper Input Sanitization in HCL Digital Experience
CVE-2026-67075

6.5MEDIUM

Key Information:

Vendor

HCL Softwaresoftware

Status
Digital Experience
Vendor
CVE Published:
1 October 2026

What is CVE-2026-67075?

HCL Digital Experience suffers from an improper input sanitation issue, potentially allowing attackers to perform HTML injection attacks. This vulnerability can be exploited to spoof content from trusted domains, posing a significant threat to the integrity of user-generated content and overall website security. It is crucial to update to HCL Digital Experience 9.5 CF238 or later to mitigate these risks effectively.

Affected Version(s)

Digital Experience 9.5

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.