CVE-2026-67075: Hclsoftware Digital Experience

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL Digital Experience is affected by improper input sanitation.  This can result in HTML injection which could be leveraged in content spoofing from a trusted domain. Apply HCL Digital Experience 9.5 CF238 or later to address this.

Affected products

• Hclsoftware Digital Experience: version 9.5 only

Published 2026-10-01. Last modified 2026-10-01.