CVE Feed

    Dashboard / CVE / CVE-2026-67071

    CVE-2026-67071

    HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure values embedded inside insecure properties.

    Published:Sep 17, 2026
    Last Modified:Sep 18, 2026
    EPS:Sep 17, 2026
    EPSS Score:0.00223
    CVSS Score:6.5

    Affected Products

    Vendor
    Hcltech
    Product
    Hcl Devops Deploy
    Vendor
    Hcltech
    Product
    Hcl Launch

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-168 Windows ::DATA Alternate Data Stream

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High