CVE-2026-21764
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
The vulnerability in HCL DevOps Loop is caused by insufficient input validation, allowing special characters where they should be restricted. This may result in unintended application behavior under certain conditions.
Risk Assessment
The risk involves potential disruption of application behavior, which could affect data integrity or system stability, potentially enabling injection attacks or other adverse effects.
Recommendation
It is recommended to immediately update HCL DevOps Loop to the latest version containing security fixes and implement additional input validation at the application level.
Original NVD description (English source)
HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.