Skip to content

Known vulnerabilities in HCL Software iControl

Is your version affected?

CVE Summary Score Published
CVE-2026-66253 iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or… 3.1 Low Oct 1, 2026
CVE-2026-66249 iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies… 3.1 Low Oct 1, 2026
CVE-2026-66248 iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to… 3.1 Low Oct 1, 2026
CVE-2026-66247 iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a… 4.3 Medium Oct 1, 2026
CVE-2026-66246 iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing… 8.8 High Oct 1, 2026
CVE-2025-62340 HCL iControl was affected by Inadequate Session Timeout vulnerability 3.1 Low Jun 17, 2026

Other HCL Software products