Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2026-21760

Unauthorized Access to Admin Functionality via Forced Browsing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware DevOps Loop

Default version status: unaffected

  • 2.0.0affected

References