CVE-2026-56590

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@hcl.com

Published

2026-09-18

Last modified

2026-10-14

Weaknesses

CWE-434

Affected products

• Hcl Bigfix Service Management (Hcl Software)
• Bigfix Service Management (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917