CVE•Published 2026-07-17•Modified 2026-08-13•0 articles on news•4 live references•NVD data

CVE-2026-21762Hcltech · Devops_loop

Vulnerability data via NVD (ingested)

CVSS v3.1

3.7

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS percentile

7

Exploit Prediction Scoring System · top 93% of all CVEs

Weaknesses (CWE)

CWE-644Improper Neutralization of HTTP Headers for Scripting Syntax

Description

HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and cross-site scripting.

Timeline

Published 2026-07-17

Modified 2026-08-13

External references

NVD MITRE Exploit-DB VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2026-21762

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product + version

product:"Hcltech Devops Loop" version:"2.0.0"

Version-pinned fingerprint from NVD's first vulnerable CPE.

Shodan · banner/body mention

http.html:"Devops Loop"

HTTP body or banner mentions "Devops Loop" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

vuln:CVE-2026-21762

Country / ASN / product breakdown for the vuln query.

vulnerabilities.cve_id: CVE-2026-21762

Censys host search filtered to this CVE id.

CVE-2026-21762

Public source-code mentions — fast PoC discovery.

CVE-2026-21762

GitHub code search for direct mentions.

"CVE-2026-21762" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2026-217628 repos

0xor0ne/awesome-listunknown

Cybersecurity oriented awesome list

★ 4,214·updated 2d ago

eeeeeeeeee-code/POCunknown

备份的漏洞库，3月开始我们来维护

★ 2,230·updated 2mo ago

Zeyad-Azima/Offensive-Resourcesunknown

A Huge Learning Resources with Labs For Offensive Security Players

★ 1,174·updated 10mo ago

Ostorlab/KEVunknown

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

★ 620·updated 6d ago

fankh/vulnerability-pocPython

CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security testing & research only.

★ 103·updated today

openbashok/promptzeroPython

Zero trace. Full answer. — Transparent Claude API proxy that anonymizes PII and sensitive data before it leaves your environment. From pentesters, to pentesters.

★ 70·updated 4mo ago

skyvanguard/KryonPython

Autonomous offensive-security agent: recon, authorized pentest, vuln hunting, DFIR & multi-framework compliance from a single prompt. Local-first (llama.cpp), skill-based, determin…

★ 29·updated 1mo ago

zulloper/cve-pocPython

CVE POC repo 자동 수집기

★ 19·updated today

We haven't classified any articles referencing CVE-2026-21762 yet. The external references above still apply.