CVE-2026-21762

Name of the Vulnerable Software and Affected Versions HCL DevOps Loop (affected versions not specified)

Description The software is affected by missing HTTP security headers. This omission may reduce browser protections against common web-based attacks, including clickjacking (an attack that tricks users into clicking something different from what they perceive), MIME-type sniffing (where a browser ignores the declared content type and attempts to guess the format), and cross-site scripting (the injection of malicious scripts into trusted websites).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.