Is CVE-2026-21759 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-21759?

CVE-2026-21759 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-21759

Description

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.