Is CVE-2026-65022 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-65022 being exploited in the wild.

How severe is CVE-2026-65022?

Medium severity, with a CVSS score of 6.3, published 6 November 2026.

Is there a fix for CVE-2026-65022?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-65022 attacked?

It is attacked over the network.

Am I affected by CVE-2026-65022?

Check whether you run HCL Software MDM App Catalog. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-65022: HCL Software MDM App Catalog cross-site scripting

CVE-2026-65022 · Severity: medium · CVSS 6.3 · Published 2026-11-06

HCL Software's MDM (Mobile Device Management) App Catalog contains a cross-site scripting vulnerability in its app preview feature. An attacker can inject malicious HTML code into app listings, which will be displayed to users when they preview apps. When users interact with the crafted preview content, the injected code executes in their browser, potentially allowing attackers to steal credentials, session tokens, or perform actions on behalf of the user.

Vendors: HCL Software.

Quick answers

Is CVE-2026-65022 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-65022 being exploited in the wild.
How severe is CVE-2026-65022?: Medium severity, with a CVSS score of 6.3, published 6 November 2026.
Which products and versions are affected?: HCL Software MDM App Catalog.
Is there a fix for CVE-2026-65022?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-65022 attacked?: It is attacked over the network.
Am I affected by CVE-2026-65022?: Check whether you run HCL Software MDM App Catalog. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The MDM App Catalog / App Store preview feature fails to properly sanitize or encode user-supplied HTML before rendering it to clients. This stored or reflected XSS vulnerability allows an attacker to inject arbitrary HTML/JavaScript that executes in the context of users viewing the preview. The vulnerability requires user interaction with the crafted preview content but has no apparent authentication barriers to preview access.

Affected products

HCL Software MDM App Catalog

Timeline

2026-11-06: disclosed

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135001

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.