VULNERABILITY INTELLIGENCE

CVE-2026-21760

CVSS score4.6 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-07-17
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Description

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

Weakness classification

  • psirt@hcl.com: CWE-425

Primary references