CVE-2021-27768

CVE-2021-27768 is a medium-severity vulnerability affecting HCLTech Verse, stemming from a lack of hostname verification in its Android application. This flaw allows a Man-in-the-Middle (MITM) attacker to intercept sensitive account information during server setup and login flows by presenting an invalid certificate. While the CVSS score is 5.9, its attack complexity is high, requiring an attacker to be in a privileged network position. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.