CVE-2026-21756High· 7.2▾ TwilightHCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108899High· 7.3A flaw has been found in tobychui zoraxy up to 3.3.4
CVE-2026-32561High· 8.8Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.
CVE-2026-32558Critical· 9.8Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
CVE-2026-28165Critical· 9.8Unauthenticated Privilege Escalation in Digits <= 9.2 versions.
CVE-2026-108890Medium· 6.3A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0
CVE-2026-108835Medium· 4.4A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9