CVE-2026-21761: Hcltech Devops Loop

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application resources to untrusted domains.

Affected products

• Hcltech Devops Loop: version 2.0.0 only

Published 2026-07-17. Last modified 2026-08-13.