CVE-2026-21764

HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.

CVSS v3 3.1 LOW

3.1^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.6 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:devops_loop:2.0.0:*:*:*:*:*:*:*

History

24 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) HCL DevOps Loop se ve afectado por una validación de entrada insuficiente que permite caracteres especiales donde deberían estar restringidos. Esto puede resultar en un comportamiento inesperado de la aplicación bajo ciertas condiciones.

Information

Published : 2026-07-17 17:17

Updated : 2026-10-24 20:10

NVD link : CVE-2026-21764

Mitre link : CVE-2026-21764

CVE.ORG link : CVE-2026-21764

JSON object : View

Products Affected

hcltech

devops_loop

CWE

CWE-754

Improper Check for Unusual or Exceptional Conditions

{"id": "CVE-2026-21764", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21764", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-17T17:52:57.262662Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCLSoftware", "product": "DevOps Loop", "versions": [{"status": "affected", "version": "2.0.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-17T17:17:15.123", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-754"}]}], "descriptions": [{"lang": "en", "value": "HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions."}, {"lang": "es", "value": "HCL DevOps Loop se ve afectado por una validaci\u00f3n de entrada insuficiente que permite caracteres especiales donde deber\u00edan estar restringidos. Esto puede resultar en un comportamiento inesperado de la aplicaci\u00f3n bajo ciertas condiciones."}], "lastModified": "2026-10-24T20:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:devops_loop:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D04A534-5697-4C04-B858-F741208D371B"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}