CVE-2026-21760: Hcltech Devops Loop

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

Affected products

• Hcltech Devops Loop: version 2.0.0 only

Published 2026-07-17. Last modified 2026-08-13.