Unrated severityNVD Advisory· Published Jul 17, 2026· Updated Jul 17, 2026
Unauthorized Access to Admin Functionality via Forced Browsing
CVE-2026-21760
Description
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.
Affected products
1Patches
Vulnerability mechanics
References
1- support.hcl-software.com/csmmitrevendor-advisory
News mentions
0No linked articles in our index yet.