Medium 6.2Published Jul 9, 2026

CVE-2026-56459HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure

Updated under an hour ago (Oct 26, 2026, 6:30 PM ET)

Does this affect you?

It affects HCLSoftware HCL DevOps Deploy / HCL Launch and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for HCLSoftware HCL DevOps Deploy / HCL Launch

Exploited in the last 30 days

HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The application stores potentially sensitive information in log files that could be read by a local user.

CVSS: 6.2 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-532
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: HCL
NVD analysis: Analyzed
Record last updated: Jul 9, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

HCLSoftware HCL DevOps Deploy / HCL Launch hclsoftware:hcl_devops_deploy_hcl_launch (from the name)	7.3-7.3.2.18, 8.0-8.0.1.13, 8.1-8.1.2.6, 8.2-8.2.1.0	CNA record
hcltechsw hcl_devops_deploy hcltechsw:hcl_devops_deploy	from 8.0.0.0 before 8.0.1.14; from 8.1.0.0 before 8.1.2.7; from 8.2.0.0 before 8.2.2.0	NVD
hcltechsw hcl_launch hcltechsw:hcl_launch	from 7.3.0.0 before 7.3.2.19	NVD

References

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131696	vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.