# CVE-2026-21759

## Summary

- **CVE ID:** CVE-2026-21759
- **Severity:** MEDIUM
- **CVSS Score:** 4.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
- **CWE:** CWE-215
- **Published:** Aug 24, 2026
- **Last Modified:** Aug 24, 2026

## Description

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.

## Affected Products

- HCLSoftware — HCL Hive (1.0)

## References

- [CNA](https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.22%
- **EPSS Percentile:** 12.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-12._