What is GHSA-vjj9-w76c-7q84?

GHSA-vjj9-w76c-7q84 is a security advisory published by GitHub Security Advisories with Medium severity. The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently...

Which CVE IDs does GHSA-vjj9-w76c-7q84 cover?

GHSA-vjj9-w76c-7q84 covers the following CVE IDs: CVE-2026-21766. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vjj9-w76c-7q84?

GHSA-vjj9-w76c-7q84 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-vjj9-w76c-7q84MediumCVSS 5.4

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently...

Vendor

GitHub Security Advisories

Published

August 5, 2026

Last Modified

August 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-21766 →

📋 Description

The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs. This only affects applications using the default login portlet.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-21766
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132659
https://github.com/advisories/GHSA-vjj9-w76c-7q84