PT-2026-60815 · Hclsoftware · Devops Loop

CVE-2026-21760 · Publicado 2026-07-17 · Atualizado 2026-07-17

Mitre

CVSS v3.1

4.6

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

Correção

Enumeração de Fraquezas

CWE-425

Identificadores relacionados

CVE-2026-21760

Produtos afetados

Devops Loop

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-21760 · Nota de Segurança
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296 · Aviso do Fabricante