CVE-2026-56608

LowCVSS 3.7

Published: 03/08/2026(UTC)Updated: 05/08/2026(UTC)Translated: 03/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

HCL iControl is affected by missing access control. The application failed to enforce proper granular access controls, allowing users to access administrator-level functionalities without appropriate authorization.

Risk Assessment

An attacker can gain unauthorized access to administrative functions, potentially leading to privilege escalation and system integrity compromise.

Recommendation

Implement proper access control mechanisms in HCL iControl to ensure users can only access functions according to their permissions.

Original NVD description (English source)

HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization.