Cross-Origin Resource Sharing Misconfiguration in HCL DevOps Loop
CVE-2026-21761

4.2MEDIUM

Key Information:

Vendor

HCL Softwaresoftware

Status
Devops Loop
Vendor
CVE Published:
17 July 2026

What is CVE-2026-21761?

HCL DevOps Loop is compromised by a Cross-Origin Resource Sharing (CORS) misconfiguration, which can lead to unauthorized cross-origin requests. This vulnerability exposes application resources to untrusted domains, posing a significant security risk to users who may inadvertently allow sensitive data to be accessed by unauthorized parties. Proper configuration of CORS policies is crucial to ensure that only trusted domains are permitted to interact with the application.

Affected Version(s)

DevOps Loop 2.0.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...
vendor-advisory

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.