Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-21790

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability

Description

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authentication checks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware Traveler

Default version status: unaffected

  • < 14.5.1.0affected

References