VULNERABILITY INTELLIGENCE
CVE-2026-21764
CVSS score3.1 LOW
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-07-17
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.
Weakness classification
- psirt@hcl.com: CWE-754
Primary references
- psirt@hcl.com — Vendor Advisory