What’s Vulnerable › Vulnerabilities

CVE-2026-56597: HCL BigFix Service Management is affected by multiple security vulnerabilities.

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-18 · updated 2026-10-14
• Weakness: CWE-200

Description

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.

Affected products

• HCL Software HCL BigFix Service Management: 23, 27

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917

Get alerted when CVE-2026-56597 or the next vulnerability affects your stack