CVE-2025-52603
Low · 3.5CVSS
3.5
EPSS
0.3%
Published
Feb 20, 2026
CISA due date
—
The record
HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-55425 Graylog is a free and open log management platform. CWE-213
- CVE-2026-56538 An endpoint in HCL Connections is vulnerable to information disclosure. CWE-213
- CVE-2026-6280 Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT… CWE-213
- CVE-2026-33216 NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging… CWE-213