← Back

CVE-2026-56590

nvd nist
Published: Sep 18, 2026Modified: Oct 14, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Affected (2)

Hcltech
1 product
Bigfix Service Management
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Hcltech
Bigfix Service Management
Version 23
Bigfix Service Management
Version 27

Related CWEs

CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.