CVE-2025-59874

High · 8.1

CVSS

8.1

EPSS

0.3%

Published

Jun 4, 2026

CISA due date

—

The record

HCL Hive Telco Observability is affected by a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives can leave a site vulnerable.

Affected packages

Ecosystem	Package	Introduced	Fixed