Medium severity · published Aug 25, 2026
CVE-2026-21754
HCL Hive is affected by multiple security vulnerabilities.
5.4
CVSS
0.2%
EPSS
No
On KEV
Description
HCL Hive is affected by multiple infrastructure and network configuration vulnerabilities, which could lead to unauthorized lateral movement, container breakout, and sensitive data exposure within internal communications.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HI
Hive · HCL Software
V1.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-21754
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-21754
support.hcl-software.com
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133342
More from Hive
4.2
CVE-2026-21753
HCL Hive is affected by multiple security vulnerabilities.
3.7
CVE-2026-21758
HCL Hive is affected by multiple security vulnerabilities.