CVE-2026-21762

—

CVSS 3.1

5.3 medium

EPSS

<1%p7

Published

Jul 17, 2026 (Jul 17, 2026)

Modified

Aug 13, 2026

Description

HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and cross-site scripting.

Vendors: hcltech
Products: devops loop
Weakness: CWE-644
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.