NetSight
medium6.5

CVE-2026-56460

HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attack…

Impact

HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

Affected products

VendorProductAffected versions
HcltechswHcl Devops Deploy
from 8.0.0.0 before 8.0.1.14
from 8.1.0.0 before 8.1.2.7
from 8.2.0.0 before 8.2.2.0
HcltechswHcl Launch
from 7.3.0.0 before 7.3.2.19

Weakness classification

References