← CVE Radar
CVE-2026-56460HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
6.5 MEDIUMEPSS 0.37%Not in KEVNVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.5 | MEDIUM | 3.1HCL (CNA) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Details
- CVE ID
- CVE-2026-56460
- Status
- Analyzed
- Assigner (CNA)
- HCL
- Published
- Jul 9, 2026
- Last modified
- 2026-10-25 17:10 UTC
- Weaknesses
- CWE-201 · Insertion of sensitive information into sent data
Affected Products
As published by the CNA in the CVE record.
HCLSoftwareHCL DevOps Deploy / HCL Launch1 version range
- 7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0