CVE-2026-21764

HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-07-17

Last modified

2026-10-24

Weaknesses

CWE-754

Affected products

• Devops Loop (Hclsoftware)
• Devops Loop (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296