CVE-2026-56567

Katalog CVE

CVSS 3.3 · Low EPSS 0,14%

Kerentanan External Control of System or Configuration Setting pada hcltech icontrol. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.

Rincian

Terbit di NVD

31 Juli 2026

Terakhir diubah

6 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-15: External Control of System or Configuration Setting

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 3,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395 advisory vendor