CVE-2026-21760: medium-severity vulnerability in HCLSoftware DevOps Loop
Unauthorized Access to Admin Functionality via Forced Browsing
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.6epss 0.2%
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Affected products
HCLSoftware · DevOps LoopRelated CVEs — HCLSoftware DevOps Loop
In the same product, most dangerous first.