CVE-2026-21760 — Unauthorized Access to Admin Functionality via Forced Browsing
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to acces…
Published: 2026-07-17 · CVSS: 4.6 · CVSS 3.1
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7