CVE-2026-56567

HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.

Score

CVSS 3.1 5.1 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-07-31

Last modified

2026-10-23

Weaknesses

CWE-15

Affected products

• Hcl Icontrol (Hcl Software)
• Icontrol (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395