CVE-2026-56620
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting.
Risk Assessment
Verbose error messages may reveal sensitive system information, potentially aiding an attacker in further attacks.
Recommendation
Apply vendor-provided patches and configure error reporting to avoid disclosing technical details.
Other vulnerabilities in HCL BigFix Mobile
See all- CVE-2026-56619Medium
HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input.
- CVE-2025-0277Medium
HCL BigFix Mobile version 3.3 and earlier have insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.
- CVE-2025-0275Medium
HCL BigFix Mobile 3.3 and earlier have improper access control, allowing unauthorized users to access a small subset of endpoint actions, potentially enabling access to select internal functions.
Original NVD description (English source)
HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS