CVE-2026-56592

Hcltech · Published September 18, 2026

9.8

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.

Affected Products

Bigfix Service Management

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H