by Kastro
Paper/Archive/CVE-2026-56590

CVE-2026-56590

HCL Software HCL BigFix Service Management — HCL BigFix Service Management is affected by multiple security vulnerabilities.

EPSS 0.2%CVSS 9.8
critical.is priorityof 100
31
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 9.0.090 × 201.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Affected

ProductAffectedFixed inSource
HCL BigFix Service Managementv27–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HCL (CNA)6.4CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917