CVE-2026-21760: Unauthorized Access to Admin Functionality via Forced Browsing
Published Jul 17, 2026
·Updated
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.
Affected Software
2 affected components
HCL DevOps Loop
hcltech Devops Loop=2.0.0
Event History
Jul 17, 2026
CVE Published
via MITRE·05:06 PM
Data Sourced
via MITRE·05:06 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-21760?
CVE-2026-21760 has a medium severity rating of 4.6.
2
What are the risks associated with CVE-2026-21760?
CVE-2026-21760 poses a risk of unauthorized access to administrative functionality in HCL DevOps Loop.
3
How do I fix CVE-2026-21760?
To fix CVE-2026-21760, ensure proper authorization checks are implemented for protected application endpoints.
4
What is the impact of CVE-2026-21760?
CVE-2026-21760 can allow unauthorized users to access restricted admin functionality, potentially compromising the application.
5
When was CVE-2026-21760 published?
CVE-2026-21760 was published on July 17, 2026.