CVE-2026-21790 MEDIUM

CVE-2026-21790: HCL Traveler is susceptible to a weak default HTTP header validation vulnerability

Vendor Hclsoftware

Product Traveler

Weakness CWE-346 · Origin validation

Published March 24, 2026

Last update March 24, 2026

View on NVD All CVEs

CVSS base score

6.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks.

Key dates

02Disclosure timeline

March 24, 2026 CVE published

March 24, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-21790 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/346.html

Related vulnerabilities

CVE-2026-21790: HCL Traveler is susceptible to a weak default HTTP header validation vulnerability

01Description

02Disclosure timeline

03References

04Related CVE