CVE-2026-56570CWE-522

CVE-2026-56570

Low · published July 31, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
21.2
In the wild
Unconfirmed
What it is

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser suggestions.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00296 · 21.2th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-07-31T20:17Z
Affected products (1)
ProductVersionsFixed in
hcltech/icontrolall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395 · [email protected]
EPSS history
Timeline
  • 31 JUL 14:59Z
    HCL iControl is affected by multiple security vulnerabilities.
    cvelistv5