Skip to main content

HCL Traveler CVE-2026-56547

| EUVDEUVD-2026-66668 LOW
Improper Input Validation (CWE-20)
2026-08-26 HCL GHSA-5qmj-327q-chf5
Information Disclosure Apple Traveler
3.5
CVSS 3.1 · Vendor: HCL

Severity by source

Vendor (HCL) PRIMARY
3.5 LOW
AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
vuln.today AI
3.5 LOW

Authentication required (PR:L) and user interaction needed (UI:R); primary effect is incorrect data embedded in profile, warranting I:L over A:L.

3.1 AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (HCL).

CVSS VectorVendor: HCL

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Lifecycle Timeline

2
Patch available
Aug 26, 2026 - 21:02 EUVD
Analysis Generated
Aug 26, 2026 - 19:54 vuln.today

DescriptionCVE.org

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them.  The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects them back in the generated Apple profile.  The Apple profile is not usable without additional information and only allows the attacker to attack their own device, but HCL Traveler could at least check that the values submitted and reflected back in the Apple profile are found in the Domino directory entry for the already authenticated user.

AnalysisAI

HCL Traveler's Apple profile generation page reflects user-submitted Logon Name and Mail Address values into generated Apple device synchronization profiles without verifying those values against the authenticated user's entry in the HCL Domino directory. An authenticated, low-privileged user can therefore embed arbitrary directory values into a generated Apple profile. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires an active, authenticated Traveler session (PR:L confirmed by CVSS vector) and deliberate interaction with the Apple profile generation page (UI:R confirmed by CVSS vector). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The vendor-assigned CVSS 3.1 score of 3.5 (Low) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L reflects the constrained impact accurately. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation The primary remediation is to apply the vendor-supplied patch or updated Traveler build referenced in HCL advisory KB0132221 at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132221. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Traveler

View all
CVE-2025-1771 CRITICAL
9.8 Mar 15

The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via t
CVE-2026-25449 CRITICAL
9.8 Mar 18

A critical PHP object injection vulnerability exists in the Shinetheme Traveler WordPress theme due to insecure deserial
CVE-2016-3039 HIGH
8.1 Jul 17

IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of

CVE-2026-21790 MEDIUM
6.3 Mar 24

HCL Traveler contains a weak default HTTP header validation vulnerability (CWE-346) that allows authenticated attackers

CVE-2025-1773 MEDIUM
6.1 Mar 15

The Traveler theme for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions
CVE-2019-4409 MEDIUM
5.4 Oct 18

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. Rated medium severity (CVSS 5.4),
CVE-2022-27561 MEDIUM
4.8 Sep 15

There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf). Rated medium

CVE-2026-21783 MEDIUM
4.3 Mar 24

HCL Traveler contains a sensitive information disclosure vulnerability where error messages expose internal system detai
CVE-2025-0279 MEDIUM
4.3 Apr 03

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal
CVE-2025-0278 MEDIUM
4.3 Apr 03

HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reve

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-56547 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy