Skip to content
OpenAdvisories
High · 8.8 CVE-2026-21824 EUVD-2026-45974GHSA-rvf7-vq7f-5gc3

A privilege escalation vulnerability affects HCL Commerce

Published Jul 20, 2026 · Updated Jul 21, 2026 · Assigned by HCL

Description

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Affected products

VendorProductAffectedFixed
HCLSoftware Commerce 7, 8.x, 9.0 - 9.0.1.21, 9.1.0 - 9.1.19, —

References