CVE-2026-56590
Critical
9.8 CVSS v3.1
- Published
- Sep 18, 2026
- Updated
- Oct 14, 2026
- Vendor
- Hcltech
- Affected versions
- See affected products
- Weakness
- CWE-434
Summary
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.
Severity
Critical (9.8)CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
- Hcltech Bigfix Service Management 23
- Hcltech Bigfix Service Management 27
Exploitation status
Unknown
Technical details
Technical analysis has not been written for this record yet.
Mitigation & remediation
Follow the vendor advisory linked below for patches and workarounds.