Cross-Site Scripting Vulnerability in HCL Connections

CVE-2026-67165

What is CVE-2026-67165?

HCL Connections is susceptible to a cross-site scripting vulnerability that enables attackers to execute arbitrary script code in the web browsers of unsuspecting users. This exploitation could lead to the theft of cookie-based authentication credentials, allowing attackers to compromise user accounts and potentially initiate further attacks. It is vital for users to be aware of this vulnerability and implement security measures to protect their data.

References