CVE-2026-21770

MediumCVSS 6.5/10Last modified Oct 24, 2026

Description

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2026
Last modified: Oct 24, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-21788.8A vulnerability was found in r-huijts xcode-mcp-server up to f3419f00117aa9949e326f78cc940166c88f18cb. This affects the function registerXco CVE-2026-217834.3HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide detailed informati CVE-2026-217844.8HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's e CVE-2026-217854.0A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0442 and earlier) fails to define d CVE-2026-217863.3HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain UR CVE-2026-217885.4HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in CVE-2026-217894.6HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.CVE-2026-21797.2A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-user CVE-2026-217906.3HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to bypass additional authe CVE-2026-217913.3HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certai CVE-2026-21808.8A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such man CVE-2026-218069.8HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneo