CVE-2026-21761 | HCL DevOps Loop 2.0.0 CORS Configuration cross-domain policy

July 17, 2026 Yanac

A vulnerability was found in HCL DevOps Loop 2.0.0. It has been classified as problematic. The impacted element is an unknown function of the component CORS Configuration. Performing a manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability is identified as CVE-2026-21761. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More