3.7
Low
CVE-2026-56570 HCL iControl was affected by Auto complete Enabled vulnerabilities
Description
HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser suggestions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL iControl | Versions not published |
Other CVEs of HCL iControl
The 7 CVEs of HCL iControl →
CVE-2026-56609
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability
4.8
Medium
CVE-2026-56608
HCL iControl is affected by Missing Access Control vulnerability
3.7
Low
CVE-2026-56571
HCL iControl was affected by Improper Error Handling vulnerabilities
3.7
Low
CVE-2026-56569
HCL iControl was affected by Sensitive Data Exposure vulnerabilities
4.0
Medium