CVE-2026-21768

{"id": "CVE-2026-21768", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21768", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-22T19:36:14.172439Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.0}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCLSoftware", "product": "Verse for Android", "versions": [{"status": "affected", "version": "14.5.10"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-19T15:16:35.020", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130866", "source": "psirt@hcl.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations."}, {"lang": "es", "value": "La biblioteca compose-rich-editor (v1.0.0-rc14) utilizada en la composici\u00f3n de correo electr\u00f3nico de texto enriquecido de HCL Verse para Android no logra validar correctamente toda la entrada HTML, permitiendo as\u00ed que contenido malicioso sea ejecutado en ciertas situaciones."}], "lastModified": "2026-10-25T23:10:00.167", "sourceIdentifier": "psirt@hcl.com"}