---
id: CVE-2026-21759
title: "HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.\_ Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticat…"
summary: "HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.\_ Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticat…"
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N'
cwe:
  - CWE-215
published: '2026-08-24'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T15:10:00.207'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-21759'
references:
  - url: >-
      https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731
    label: psirt@hcl.com
tags:
  - nvd
epss: 0.00222
epssPercentile: 0.11786
ingestedAt: '2026-10-12T15:55:08.115Z'
---

## Overview

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.