Description
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCLSoftware | Connections | 8.0 | — |
Medium · 4.6
CVE-2026-21789
EUVD-2026-30798GHSA-hx5c-g9jj-chxv
HCL Connections is vulnerable to broken access control
Published May 18, 2026 · Updated May 18, 2026 · Assigned by HCL