Is CVE-2026-67071 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-67071?

CVE-2026-67071 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-67071

Description

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure values embedded inside insecure properties.