Low severity3.1NVD Advisory· Published Sep 18, 2026· Updated Oct 14, 2026
CVE-2026-56595
CVE-2026-56595
Description
HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.
Affected products
3cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hcltech:bigfix_service_management:23:-:*:*:*:*:*:*
- cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- support.hcl-software.com/csmnvdVendor Advisory
News mentions
0No linked articles in our index yet.