A vulnerability was found in HCL Digital Experience and Digital Experience Compose 9.5 and classified as problematic. The impacted element is an unknown function of the component Login Portlet. Executing a manipulation can lead to information disclosure.

The identification of this vulnerability is CVE-2026-21766. The attack may be launched remotely. There is no exploit available.