๐Ÿ” CVE Alert

CVE-2026-21764

LOW 3.1

Insufficient Input Validation in DevOps Loop

CVSS Score
3.1
EPSS Score
0.0%
EPSS Percentile
0th

HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.

CWE CWE-754
Vendor hclsoftware
Product devops loop
Published Jul 17, 2026
Last Updated Jul 17, 2026
Stay Ahead of the Next One

Get instant alerts for hclsoftware devops loop

Be the first to know when new low vulnerabilities affecting hclsoftware devops loop are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Affected Versions

HCLSoftware / DevOps Loop
2.0.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
support.hcl-software.com: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296