CVE-2026-21824 — A privilege escalation vulnerability affects HCL Commerce

CVE-2026-21824

A privilege escalation vulnerability affects HCL Commerce PUBLISHED

Description (CNA)

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / Commerce	affected 7, 8.x, 9.0 - 9.0.1.21, 9.1.0 - 9.1.19,

CWE

CWE-266

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130114

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.