CVE-2026-21768EPSS p5.3%

CVE-2026-21768CVE-2026-21768

Description

The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations.

Scoring

CVSS 6.3 ()
VectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS0.16% probability of exploitation · percentile 5.3% · 2026-08-03T12:00:16Z
Last modified2026-06-19
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.