CVE-2026-21760 — Unauthorized Access to Admin Functionality via Forced Browsing

CVE-2026-21760

Unauthorized Access to Admin Functionality via Forced Browsing PUBLISHED

Description (CNA)

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / DevOps Loop	affected 2.0.0

CWE

CWE-425

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.