CVE-2026-57736: Hubspot

High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Insertion of Sensitive Information Into Sent Data vulnerability in HubSpot allows Retrieve Embedded Sensitive Data. This issue affects HubSpot: from n/a through 11.3.51.

Affected products

• Hubspot Hubspot: up to and including 11.3.51

Published 2026-07-01. Last modified 2026-07-01.