CVE-2026-56609 — HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).

CVE-2026-56609

HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). PUBLISHED

Description (CNA)

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL iControl	affected v3.2.0

CWE

CWE-327

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132564

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.