CVE-2026-56590 — HCL BigFix Service Management is affected by multiple security vulnerabilities.

CVE-2026-56590

HCL BigFix Service Management is affected by multiple security vulnerabilities. PUBLISHED

Description (CNA)

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL BigFix Service Management	affected v27

CWE

CWE-434

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.