CVE-2026-56595
LOWCVSS 3.1Description
HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.
Timeline
Published:September 18th, 2026 9:16 AM
Last modified:October 14th, 2026 5:43 PM
CVSS Scoring
CVSS v3: 3.1 (LOW)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected Software
From NVD CPE configuration data
Vendors
hcltech
Products
bigfix_service_management
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute