Skip to content
OpenAdvisories
Medium · 4.6 CVE-2026-21760 EUVD-2026-45230GHSA-5ffw-6qxc-pqrw

Unauthorized Access to Admin Functionality via Forced Browsing

Published Jul 17, 2026 · Updated Jul 17, 2026 · Assigned by HCL

Description

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

Affected products

VendorProductAffectedFixed
HCLSoftware DevOps Loop 2.0.0 —

References