CVE-2026-21760

תיאור (מקור, אנגלית)

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

מדדים

CVSS 3.1

4.6 (MEDIUM) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-4/8/2026

CWE

CWE-425

קישורים

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296