CVE-2026-56460 — HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability

CVE-2026-56460

HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability PUBLISHED

Description (CNA)

HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / HCL DevOps Deploy / HCL Launch	affected 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0

CWE

CWE-201

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131697

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.