Hcltech Devops Loop vulnerabilities

4 CVEs affecting Hcltech Devops Loop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21764, published 2026-07-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-21762, published 2026-07-17. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and…
CVE-2026-21764, published 2026-07-17. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain…
CVE-2026-21760, published 2026-07-17. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted…
CVE-2026-21761, published 2026-07-17. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application…