Threat Intelligence Database

HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws.

CVE-2026-21755 is a medium severity vulnerability in HCL Hive version 1.0 caused by improper restriction of excessive authentication attempts. The lack of rate limiting allows attackers to perform brute-force or credential stuffing attacks, potentially leading to unauthorized access or denial of service. No patch or official fix information is provided.

HCL Hive version 1.0 is affected by an information exposure vulnerability where Swagger API documentation is publicly accessible without authentication. While no sensitive information such as credentials or personally identifiable information was found exposed, the public availability of API documentation can increase the attack surface by revealing implementation details.