6.4med
CVE-2026-56590
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Published 50 d ago · modified 23 d ago · JSON
CVSS
6.4
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 9%
Public exploits
0
none known
Summary
HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.
CISA SSVC assessment
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 49 d ago
Exploit prediction (EPSS)
0.19% probability of exploitation in the next 30 days, higher than 9% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 6.4 | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N |
| CNA | 3.1 | 6.4 | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
- HCL Software HCL BigFix Service Management
Classification
- Weakness
- CWE-434 Unrestricted Upload of File with Dangerous Type
References
- support.hcl-software.com /csm?id=kb_article&sysparm_article=KB0133917
Sources
- CVE List: CVE-2026-56590
- NVD: CVE-2026-56590
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.