CVE-2026-21790

Publication date

2026-03-24 20:04:28

Family

HCL

State

PUBLISHED

Description

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks.