CVE-2026-21791— HCL Sametime for Android is affected by sensitive information disclosure
Possible ATT&CK Techniques 1AI
T1005 · Data from Local SystemGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-21791
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HCL Sametime for Android is affected by sensitive information disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URL
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
HCL Sametime 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HCL Sametime是印度HCL公司的一个会议解决方案。 HCL Sametime存在安全漏洞，该漏洞源于主机名信息被写入应用程序日志和特定URL，可能导致敏感信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-21791
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-21791
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-21791 (1)
IV. Related Vulnerabilities
Same product: Sametime
- CVE-2025-62320
HTML Injection Leading to Data Exfiltration to External Serv - CVE-2025-31966
Boolean-Based SQL Injection in Multiple Unica Components - CVE-2023-50355
HCL Sametime is impacted by generation of error messages con - CVE-2024-30124
HCL Sametime is impacted by insecure services - CVE-2024-30122
HCL Sametime is impacted by misconfigured security related H
Same vendor: HCL
- CVE-2025-62347
HCL iControl 输入验证错误漏洞 - CVE-2025-59874
HCL Hive Telco Observability is affected by a Required dire - CVE-2025-52606
HCL iControl was affected by Weak Input Validation vulnerabi - CVE-2025-52608
HCL iControl was affected by Missing Cookie Attributes vuln - CVE-2025-52609
HCL iControl was affected by Missing Security Headers vulner
Same weakness: CWE-532
- CVE-2026-75485
Must-gather: must-gather: cluster proxy object dumped raw, b - CVE-2026-75057
IntelliJ IDEA<2026.1.5 明文存储Git凭证 - CVE-2026-59911
Dell ObjectScale <4.3.0.1 日志注入致信息泄露 - CVE-2026-74870
openssl_encrypt before 1.4.8 Hardware Pepper Information Dis - CVE-2026-19483
The following vulnerabilities that can affect IBM Storage Sc
V. Comments for CVE-2026-21791
No comments yet