4.6

CVE-2026-21760

EPSS 0.15%
Veröffentlicht 17.07.2026 17:06:19
Zuletzt bearbeitet 13.08.2026 13:10:57
Erkennungen
Login

Unauthorized Access to Admin Functionality via Forced Browsing

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hcltech ≫ Devops Loop Version 2.0.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.15%	0.045

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@hcl.com	4.6	2.1	2.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

CWE-425 Direct Request ('Forced Browsing')

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-21760

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-21760

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-21760

EUVD