Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	6.8	CVE-2026-108013	BigFix Platform uses Mozilla CA certificate bundle (PEM) Mozilla, HCL Software, BigFixHCL Software BigFix Platform, BigFix Platform, Mozilla CA certificate bundle	NVD	Oct 24 07:16 UTC
CVE-2026-108013BigFix Platform uses Mozilla CA certificate bundle (PEM) Executive summary The advisory says that the BigFix Platform ships an outdated Mozilla CA certificate bundle that still trusts certificates whose private keys have been compromised. An attacker positioned between the product and a server could impersonate that server and tamper with files the product downloads. The advisory states the fix is to use a bundle dated 2026/10/20 or later, available starting from BES Support v1520. Technical summary This is a trust validation weakness caused by an outdated certificate authority bundle in the BigFix Platform. Bundles dated before 2026/10/20 still trust certificates whose private keys are compromised, so an on-path attacker can impersonate remote servers during validation. The attack requires a network position between the product and the target server, and the advisory describes file tampering as the impact. The fix is bundle version 2026/10/20 or later, available starting from BES Support v1520. The advisory does not state a CVSS score, exploitation status, or any workaround, and it does not give detection guidance. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affects Mozilla HCL Software BigFix HCL Software BigFix Platform BigFix Platform Mozilla CA certificate bundle NIST National Vulnerability DatabasePublished Oct 24, 2026 07:16 UTC Read the advisory
	Low	2.2	CVE-2026-21812	HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP HCL Software, HCLHCL Software AppScan Integration with Azure Boards for ASoC & A360, HCL AppScan Azure Boards Plugin	NVD	Oct 22 09:17 UTC
CVE-2026-21812HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP Executive summary HCL AppScan Azure Boards Plugin has a flaw where it can send sensitive data in cleartext when configured to talk to the AppScan server over HTTP. An attacker who can observe that traffic could capture credentials or authentication tokens. The advisory says the plugin now shows a warning when HTTP is used and recommends HTTPS instead. Technical summary The weakness is classified as cleartext transmission of sensitive information (CWE class not stated). Exploitation requires the plugin to be configured to communicate with the AppScan server over HTTP, and an attacker able to intercept that network traffic could obtain credentials or authentication tokens. Affected versions are not stated, and no fixed version is stated. The advisory says the plugin was updated to display a warning when HTTP is used and to recommend HTTPS; it does not describe a complete fix that forces encryption. Workarounds beyond switching to HTTPS are not stated, and no detection guidance is given. CVSS score and exploitation status are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required High User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N Affects HCL Software HCL HCL Software AppScan Integration with Azure Boards for ASoC & A360 HCL AppScan Azure Boards Plugin NIST National Vulnerability DatabasePublished Oct 22, 2026 09:17 UTC Read the advisory
	Low	3.8	CVE-2026-21811	HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution HCL Software, HCLHCL Software AppScan Integration with Azure Boards for ASoC & A360, HCL AppScan Azure Boards Plugin	NVD	Oct 22 09:17 UTC
CVE-2026-21811HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution Executive summary HCL AppScan Azure Boards Plugin is affected by an information disclosure flaw in which secrets can be readable in plaintext during pipeline runs. The advisory does not state a severity rating, and it does not describe a fix or vendor recommendation. Technical summary The weakness is an information disclosure issue where secrets are accessible in plaintext during pipeline execution, even though they are masked in the user interface. Depending on pipeline configuration, the advisory says secrets could be exposed through task outputs, debug logs, environment variable dumps, or build agent scripts. The advisory describes the issue as potential ('potentially affected'), and it does not state the attack vector, required privileges, or CVSS score. Affected and fixed version numbers are not stated. Workarounds and detection guidance are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required High User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N Affects HCL Software HCL HCL Software AppScan Integration with Azure Boards for ASoC & A360 HCL AppScan Azure Boards Plugin NIST National Vulnerability DatabasePublished Oct 22, 2026 09:17 UTC Read the advisory
	Medium	5.4	CVE-2026-67165	HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user... HCL SoftwareHCL Software Connections	NVD	Oct 13 08:17 UTC
CVE-2026-67165HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user... From the advisory HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may allow the attacker steal cookie-based authentication credentials and comprise user's account then launch other attacks. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction Required Scope Changed CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Affects HCL Software HCL Software Connections NIST National Vulnerability DatabasePublished Oct 13, 2026 08:17 UTC Read the advisory
	Low	3.5	CVE-2026-56596	HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling... HCL SoftwareHCL Software HCL BigFix Service Management	NVD	Oct 6 12:16 UTC
CVE-2026-56596HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling... From the advisory HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior. Impact if exploited ConfidentialityNone IntegrityLow AvailabilityNone How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affects HCL Software HCL Software HCL BigFix Service Management NIST National Vulnerability DatabasePublished Oct 6, 2026 12:16 UTC Read the advisory
	Low	3.7	CVE-2026-67172	HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are... HCL Software, HcltechHCL Software HCL BigFix Service Management, Hcltech Bigfix Service Management	NVD	Oct 1 17:17 UTC
CVE-2026-67172HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are... From the advisory HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affects HCL Software Hcltech HCL Software HCL BigFix Service Management Hcltech Bigfix Service Management NIST National Vulnerability DatabasePublished Oct 1, 2026 17:17 UTC Read the advisory
	Medium	5.3	CVE-2026-67171	HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information HCL Software, HcltechHCL Software HCL BigFix Service Management, Hcltech Bigfix Service Management	NVD	Oct 1 17:17 UTC
CVE-2026-67171HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information From the advisory HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This information could enable an attacker to facilitate targeted database attacks. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects HCL Software Hcltech HCL Software HCL BigFix Service Management Hcltech Bigfix Service Management NIST National Vulnerability DatabasePublished Oct 1, 2026 17:17 UTC Read the advisory
	Low	3.7	CVE-2026-21833	HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured HCL SoftwareHCL Software AION	NVD	Oct 1 17:17 UTC
CVE-2026-21833HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured From the advisory HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting (XSS) by restricting the sources from which scripts, styles, and other resources can be loaded. The absence of this header may reduce the effectiveness of browser-based security controls, potentially resulting in unintended behavior or negative security impacts under certain conditions. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Affects HCL Software HCL Software AION NIST National Vulnerability DatabasePublished Oct 1, 2026 17:17 UTC Read the advisory
	Medium	4.3	CVE-2025-31980	HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the... HCL Software, HcltechHCL Software HCL BigFix Service Management, Hcltech Bigfix Service Management	NVD	Oct 1 17:17 UTC
CVE-2025-31980HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the... From the advisory HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems. Impact if exploited ConfidentialityNone IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Affects HCL Software Hcltech HCL Software HCL BigFix Service Management Hcltech Bigfix Service Management NIST National Vulnerability DatabasePublished Oct 1, 2026 17:17 UTC Read the advisory
	Medium	5.3	CVE-2026-67106	HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data HCL Software, HcltechHCL Software HCL BigFix Service Management, Hcltech Bigfix Service Management	NVD	Oct 1 15:17 UTC
CVE-2026-67106HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data From the advisory HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects HCL Software Hcltech HCL Software HCL BigFix Service Management Hcltech Bigfix Service Management NIST National Vulnerability DatabasePublished Oct 1, 2026 15:17 UTC Read the advisory
	High	7.4	CVE-2026-67105	HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP... HCL Software, HcltechHCL Software HCL BigFix Service Management, Hcltech Bigfix Service Management	NVD	Oct 1 15:17 UTC
CVE-2026-67105HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP... From the advisory HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle (MitM) attacks. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affects HCL Software Hcltech HCL Software HCL BigFix Service Management Hcltech Bigfix Service Management NIST National Vulnerability DatabasePublished Oct 1, 2026 15:17 UTC Read the advisory
	Medium	5.3	CVE-2026-67104	HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript... HCL Software, HcltechHCL Software HCL BigFix Service Management, Hcltech Bigfix Service Management	NVD	Oct 1 15:17 UTC
CVE-2026-67104HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript... From the advisory HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects HCL Software Hcltech HCL Software HCL BigFix Service Management Hcltech Bigfix Service Management NIST National Vulnerability DatabasePublished Oct 1, 2026 15:17 UTC Read the advisory
	Low	2.2	CVE-2026-56599	HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such... HCL Software, HcltechHCL Software HCL BigFix Service Management, Hcltech Bigfix Service Management	NVD	Oct 1 15:17 UTC
CVE-2026-56599HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such... From the advisory HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabling Cross-Site Request Forgery (CSRF), session hijacking via Cross-Site Scripting (XSS), and unauthorized access. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction Required Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N Affects HCL Software Hcltech HCL Software HCL BigFix Service Management Hcltech Bigfix Service Management NIST National Vulnerability DatabasePublished Oct 1, 2026 15:17 UTC Read the advisory
	High	7.2	CVE-2026-56589	HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the... HCL Software, HcltechHCL Software HCL BigFix Service Management, Hcltech Bigfix Service Management	NVD	Oct 1 15:17 UTC
CVE-2026-56589HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the... From the advisory HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the application that execute when a victim views the affected page, enabling session hijacking and the theft of sensitive data. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Changed CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N Affects HCL Software Hcltech HCL Software HCL BigFix Service Management Hcltech Bigfix Service Management NIST National Vulnerability DatabasePublished Oct 1, 2026 15:17 UTC Read the advisory
	Low	3.1	CVE-2026-66253	iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling unauthorized access to the... HCL SoftwareHCL Software iControl	NVD	Oct 1 14:17 UTC
CVE-2026-66253iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling unauthorized access to the... From the advisory iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling unauthorized access to the application and the ability to perform actions on behalf of the victim. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Affects HCL Software HCL Software iControl NIST National Vulnerability DatabasePublished Oct 1, 2026 14:17 UTC Read the advisory
	Low	3.1	CVE-2026-66249	iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the... HCL SoftwareHCL Software iControl	NVD	Oct 1 14:17 UTC
CVE-2026-66249iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the... From the advisory iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Affects HCL Software HCL Software iControl NIST National Vulnerability DatabasePublished Oct 1, 2026 14:17 UTC Read the advisory
	Low	3.1	CVE-2026-66248	iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the... HCL SoftwareHCL Software iControl	NVD	Oct 1 14:17 UTC
CVE-2026-66248iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the... From the advisory iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N Affects HCL Software HCL Software iControl NIST National Vulnerability DatabasePublished Oct 1, 2026 14:17 UTC Read the advisory
	Medium	4.3	CVE-2026-66247	iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with... HCL SoftwareHCL Software iControl	NVD	Oct 1 14:17 UTC
CVE-2026-66247iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with... From the advisory iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with included credentials, enabling an attacker to access and exfiltrate sensitive data within the context of the victim's active session. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affects HCL Software HCL Software iControl NIST National Vulnerability DatabasePublished Oct 1, 2026 14:17 UTC Read the advisory
	High	8.8	CVE-2026-66246	iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references... HCL SoftwareHCL Software iControl	NVD	Oct 1 14:17 UTC
CVE-2026-66246iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references... From the advisory iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR), enabling privilege escalation and the unauthorized modification or deletion of sensitive application data. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affects HCL Software HCL Software iControl NIST National Vulnerability DatabasePublished Oct 1, 2026 14:17 UTC Read the advisory
	Medium	6.5	CVE-2026-67075	HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged in content spoofing from a trusted domain HCL SoftwareHCL Software Digital Experience	NVD	Oct 1 06:17 UTC
CVE-2026-67075HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged in content spoofing from a trusted domain From the advisory HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged in content spoofing from a trusted domain. Apply HCL Digital Experience 9.5 CF238 or later to address this. Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affects HCL Software HCL Software Digital Experience NIST National Vulnerability DatabasePublished Oct 1, 2026 06:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects