CVE-2026-56590

MEDIUMCVSS 6.4

Description

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Timeline

Published:September 18th, 2026 9:16 AM

Last modified:October 14th, 2026 5:56 PM

CVSS Scoring

CVSS v3: 6.4 (MEDIUM)

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

Affected Software

From NVD CPE configuration data

Vendors

hcltech

Products

bigfix_service_management

Weaknesses (CWE)

CWE-434

References & Reports

Advisories, patches, and third-party reports

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917Vendor Advisory

Source: NIST NVD · Data may lag official sources by up to one minute