CVE-2026-21760
Unauthorized Access to Admin Functionality via Forced Browsing
CVSS Score
4.6
EPSS Score
0.0%
EPSS Percentile
0th
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.
| CWE | CWE-425 |
| Vendor | hclsoftware |
| Product | devops loop |
| Published | Jul 17, 2026 |
| Last Updated | Jul 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for hclsoftware devops loop
Be the first to know when new medium vulnerabilities affecting hclsoftware devops loop are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
HCLSoftware / DevOps Loop
2.0.0