Hcltech Devops Loop — known CVE vulnerabilities

Every CVE whose affected-product data names Hcltech Devops Loop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-21760 — CVSS 4.6 (medium): HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks…
• CVE-2026-21761 — CVSS 4.2 (medium): HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized…
• CVE-2026-21762 — CVSS 3.7 (low): HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common…
• CVE-2026-21764 — CVSS 3.1 (low): HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may…