CVE-2026-21783

CVE-2026-21783 describes a sensitive information disclosure vulnerability in HCL Traveler, where detailed error messages expose internal system details such as paths, file names, or credentials. This could allow attackers to gain insights into the system's architecture and potentially launch targeted attacks. With a CVSS score of 4.3 (Medium), the vulnerability has a network attack vector and low attack complexity, requiring low privileges to exploit, primarily impacting confidentiality by revealing sensitive system information. There is currently no evidence of active exploitation, no known public exploit code, and minimal community discussion or media coverage, indicating a low immediate threat.