EUVD-2026-64917
GHSA-72wg-wpg2-8v59
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-reachable with no authentication per Authentication Bypass tag and PR:N; confidentiality-only impact with no integrity or availability effect confirmed.
Primary rating from Vendor (HCL).
CVSS VectorVendor: HCL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws.
AnalysisAI
Unauthorized system access in HCL Hive results from the product bundling third-party components that contain publicly documented security flaws. All tracked versions (CPE: cpe:2.3:a:hclsoftware:hcl_hive:*:*:*:*:*:*:*:*) are potentially affected, and the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms that remote, unauthenticated attackers can reach the vulnerability without user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no special conditions beyond network reachability to an HCL Hive instance are required for exploitation. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 High score is supported by a fully unauthenticated, low-complexity, network-reachable vector (AV:N/AC:L/PR:N/UI:N), meaning any attacker who can reach an exposed HCL Hive endpoint satisfies exploitation prerequisites. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the HCL Software advisory at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731 for vendor guidance on patching or upgrading the affected third-party components. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all HCL Hive deployments across your environment, document versions in use, and begin implementing network segmentation to restrict remote connectivity to Hive instances to trusted internal networks only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Incorrect default permissions in HCL Hive 1.0 expose containerized deployments to unauthorized lateral movement, contain
HCL Hive employs a risky cryptographic primitive (CWE-1240) that creates systemic trust failure across the platform: if
Broken access control in HCL Hive 1.0 allows a high-privileged network attacker to bypass code verification gates and in
HCL Hive 1.0 exposes its authentication endpoint without rate limiting, enabling unauthenticated remote attackers to con
Insufficient access control granularity in HCL Hive's Keycloak IAM instance exposes protected resources to unauthenticat
HCL Hive exposes its Swagger API documentation publicly to unauthenticated users, revealing API endpoint structures, HTT
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today