Medium severity6.4NVD Advisory· Published Sep 18, 2026· Updated Oct 14, 2026

CVE-2026-56590

Description

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Affected products

HCLTech/Bigfix Service Management2 versions
cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*
- cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*
HCL Software/BigFix Service Managementllm-create

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000