CVE-2026-56592

MEDIUM CVSS 6.5 View on NVD ↗

Description

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917

Published: Sep 18, 2026 09:16 UTC Modified: Sep 18, 2026 13:44 UTC