CVE-2026-66246 — HCL iControl is affected by multiple security vulnerabilities

CVE-2026-66246

HCL iControl is affected by multiple security vulnerabilities PUBLISHED

Description (CNA)

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR), enabling privilege escalation and the unauthorized modification or deletion of sensitive application data.

Affected (CNA)

Vendor / product	Versions
HCL Software / iControl	affected v4.5.0

CWE

CWE-250

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133940

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.