Medium severity6.5NVD Advisory· Published Sep 18, 2026· Updated Oct 14, 2026
CVE-2026-56592
CVE-2026-56592
Description
HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.
Affected products
3cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*
- cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- support.hcl-software.com/csmnvdVendor Advisory
News mentions
0No linked articles in our index yet.