CVE-2026-21783— HCL Traveler is affected by sensitive information disclosure
Quick assessment
Affected
HCLSoftware Traveler
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HCL Traveler是印度HCL公司的一款软件。用于在 HCL Domino 服务器和无线手持设备之间提供自动、双向、无线同步。 HCL Traveler存在安全漏洞，该漏洞源于错误信息泄露敏感信息，可能导致攻击者了解系统架构并发起针对性攻击。
Possible ATT&CK Techniques 1 AI
T1005 · Data from Local System
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-21783
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HCL Traveler is affected by sensitive information disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过错误消息导致的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
HCL Traveler 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HCL Traveler是印度HCL公司的一款软件。用于在 HCL Domino 服务器和无线手持设备之间提供自动、双向、无线同步。 HCL Traveler存在安全漏洞，该漏洞源于错误信息泄露敏感信息，可能导致攻击者了解系统架构并发起针对性攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HCLSoftware | Traveler | < 14.5.1.0 | - |
|
II. Public POCs for CVE-2026-21783
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-21783
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-21783 (1)
IV. Related Vulnerabilities
Same product: Traveler
-
CVE-2026-93947
WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerabil -
CVE-2026-56547
An input reflection vulnerability affects HCL Traveler -
CVE-2026-21790
HCL Traveler is susceptible to a weak default HTTP header va -
CVE-2026-25449
WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vu -
CVE-2026-24367
WordPress Traveler theme < 3.2.8 - SQL Injection vulnerabili
Same vendor: HCLSoftware
-
CVE-2026-67075
HCL Digital Experience is affected by improper input sanitat -
CVE-2026-67071
HCL DevOps Deploy / HCL Launch is susceptible to an Improper -
CVE-2026-21827
HCL Connections is vulnerable to an information disclosure v -
CVE-2025-62341
HCL Connections is vulnerable to server-side request forgery -
CVE-2026-21808
HCL BigFix Quantum Risk Analyzer is affected by logging sens
Same weakness: CWE-209
-
CVE-2026-75597
pyLoad: Unauthenticated access to /web/<path:filename> bypas -
CVE-2026-78021
Dell Secure Connect Gateway <5.34.00.16 敏感信息泄露漏洞 -
CVE-2026-105828
Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclos -
CVE-2026-101029
Gitea migration and pull mirror SSRF through multi-answer DN -
CVE-2026-105707
uptrace user_handler.go Login information exposure
V. Comments for CVE-2026-21783
No comments yet