CVE-2026-21764CWE-754

CVE-2026-21764

Low · published July 17, 2026

CVSS v3.1
3.1
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2026-07-17T21:17Z
Affected products (1)
ProductVersionsFixed in
hcltech/devops_loopall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132296 · [email protected]
EPSS history
Timeline
  • 17 JUL 17:11Z
    Insufficient Input Validation in DevOps Loop
    cvelistv5