CVE-2026-56608: falha de baixa gravidade em HCL iControl
HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.7epss 0.3%
HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL Software · HCL iControlCVEs relacionadas — HCL iControl
No mesmo produto, das mais perigosas para as menos.
CVE-2026-56568LOWHCL iControl is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-56570LOWHCL iControl is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-56571LOWHCL iControl is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-56609MEDIUMHCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).EPSS 0.2%CVE-2026-56569MEDIUMHCL iControl is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2026-56567MEDIUMHCL iControl is affected by multiple security vulnerabilities.EPSS 0.1%