Known Vulnerabilities for Traveler by Hcltech
Listed below are 3 of the newest known vulnerabilities associated with "Traveler" by "Hcltech".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-25449 | Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue affects Tr... | Not Provided | 2026-03-18 | 2026-04-01 |
| CVE-2026-21783 | HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide de... | Not Provided | 2026-03-24 | 2026-03-24 |
| CVE-2025-59012 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shinetheme Traveler tra... | Not Provided | 2025-09-26 | 2026-04-01 |
| CVE-2025-59011 | Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access Control S... | Not Provided | 2025-09-26 | 2026-04-01 |
| CVE-2025-52714 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler tra... | Not Provided | 2025-07-16 | 2026-04-01 |
| CVE-2025-39490 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mika... | Not Provided | 2025-05-23 | 2026-04-01 |
| CVE-2025-26956 | Missing Authorization vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a through < 3.2.1. | Not Provided | 2025-03-27 | 2026-04-01 |
| CVE-2025-26898 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler tra... | Not Provided | 2025-03-27 | 2026-04-01 |
| CVE-2025-26873 | Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a through... | Not Provided | 2025-03-27 | 2026-04-01 |
| CVE-2025-26733 | Missing Authorization vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a through < 3.2.1. | Not Provided | 2025-03-27 | 2026-04-01 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hcltech | Traveler | 10.0.0.0 | All | All | All |