Skip to content
6.0 Medium

CVE-2026-12588 An attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console

Description

An attacker with access to an HX 10.0.0  and previous versions, may send specially-crafted data to the HX console. The malicious detection would then trigger decompression of a large file that consumes an excessive amount of system resources thus causing a Denial of Service.

Affected products and versions

Product Affected versions Fixed in
Trellix HX Console 5.1.1 No fix stated
The 2 CVEs of Trellix HX Console →
Track this CVE