CVE-2026-21790

Description

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks.

PUBLISHED Reserved 2026-01-05 | Published 2026-03-24 | Updated 2026-03-24 | Assigner HCL

Problem types

CWE-346 Origin Validation Error

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0129139

cve.org (CVE-2026-21790)

nvd.nist.gov (CVE-2026-21790)

Download JSON