CVE-2026-21824

—

CVSS 3.1

8.8 high

EPSS

<1%p36

Published

Jul 20, 2026 (Jul 20, 2026)

Modified

Jul 21, 2026

Description

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Weakness: CWE-266
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.