CVE-2026-56457: medium-severity vulnerability in HCLSoftware HCL DevOps Deploy / HCL Launch
HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.3%
HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
HCLSoftware · HCL DevOps Deploy / HCL LaunchRelated CVEs — HCLSoftware HCL DevOps Deploy / HCL Launch
In the same product, most dangerous first.
CVE-2026-56460MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerabilityEPSS 0.4%CVE-2026-67071MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or TransferEPSS 0.4%CVE-2026-56459MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosureEPSS 0.1%