CVE-2026-21789: Hclsoftware Connections

Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days.

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.

Affected products

• Hclsoftware Connections: version 8.0 only

Published 2026-05-18. Last modified 2026-06-17.