CVE-2026-21760

MEDIUM CVSS 4.6 View on NVD ↗

Description

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296

Published: Jul 17, 2026 17:17 UTC Modified: Jul 17, 2026 18:17 UTC