Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-21826 EUVD-2026-34787GHSA-xg6r-cjq3-qmj5

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection

Published Jun 5, 2026 · Updated Jun 9, 2026 · Assigned by HCL

Description

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Host header and cause the application to behave in unexpected ways.

Affected products

VendorProductAffectedFixed
HCLSoftware Digital Experience & DX Compose 9.5 —

References