CVE-2026-21766 - The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials.  Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs.  This only affects applications using the default login portlet. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-82255 [中危] CVE-2026-82255 - gitoxide versions from 0.25.4 contain an HTTP credent…
• CVE-2026-82247 [高危] CVE-2026-82247 - gitoxide's gix-url crate (
• CVE-2026-73839 [中危] CVE-2026-73839 - Administrative credentials may be exposed in plaintex…
• CVE-2026-64632 [未知] CVE-2026-64632 - A vulnerability allowing a low-privileged user to cap…
• CVE-2026-76846 [高危] CVE-2026-76846 - Grav before 2.0.16 contains an incomplete default den…
• CVE-2026-21766 [中危] CVE-2026-21766 - The default login portlet in HCL Digital Experience a…
• CVE-2026-48295 [高危] CVE-2026-48295 - CAI Content Credentials is affected by an Insufficien…