CVE-2026-56609

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-08-03

Last modified

2026-10-23

Weaknesses

CWE-327

Affected products

• Hcl Icontrol (Hcl Software)
• Icontrol (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132564