CVE-2026-21824: Hclsoftware Commerce

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Affected products

• Hclsoftware Commerce

Published 2026-07-20. Last modified 2026-07-21.