CVE-2026-56460Medium· 6.5▾ SunlitHCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
0.4% → 0.4%
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
hcl_devops_deploy >= 8.0.0.0, < 8.0.1.14hcl_devops_deploy >= 8.1.0.0, < 8.1.2.7hcl_devops_deploy >= 8.2.0.0, < 8.2.2.0hcl_launch >= 7.3.0.0, < 7.3.2.19Upgrade past the affected range:
hcl_devops_deploy 8.2.2.0hcl_launch 7.3.2.19Connected by shared product, vendor, weakness, or advisory.
CVE-2026-56457Medium· 4.3HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs
CVE-2026-75432Medium· 6.5An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components
CVE-2026-54649Low· 2.1punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox
CVE-2026-47717High· 7.5FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software
CVE-2026-82837Medium· 5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allowed an authenticated user to access sensitive credentials …
CVE-2026-92044High· 7.5Information disclosure in the Networking: HTTP component