3.7
Low
CVE-2026-56608 HCL iControl is affected by Missing Access Control vulnerability
Description
HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL iControl | 3.2.0 | No fix stated |
Other CVEs of HCL iControl
The 7 CVEs of HCL iControl →
CVE-2026-56609
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability
4.8
Medium
CVE-2026-56571
HCL iControl was affected by Improper Error Handling vulnerabilities
3.7
Low
CVE-2026-56570
HCL iControl was affected by Auto complete Enabled vulnerabilities
3.7
Low
CVE-2026-56569
HCL iControl was affected by Sensitive Data Exposure vulnerabilities
4.0
Medium