CVE-2026-21761

HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application resources to untrusted domains.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-07-17

Last modified

2026-10-24

Weaknesses

CWE-942

Affected products

• Devops Loop (Hclsoftware)
• Devops Loop (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296