CVE-2026-56460 — HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
Published: 2026-07-09 · CVSS: 6.5 · CVSS 3.1
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7