CVE-2026-56597 — HCL BigFix Service Management is affected by multiple security vulnerabilities.

CVE-2026-56597

HCL BigFix Service Management is affected by multiple security vulnerabilities. PUBLISHED

Description (CNA)

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL BigFix Service Management	affected v27

CWE

CWE-200

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.