CVE-2026-56592 - HCL BigFix Service Management is affected by multiple security vulnerabilities. · CoreCVE

Back Back to CVE browser

MEDIUM

HCL BigFix Service Management is affected by multiple security vulnerabilities.

Published Sep 18, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.45%

Description

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.

Affected products

Vendor HCL Software Product HCL BigFix Service Management Default
unaffected
Affected
- v27

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
HCL Software	HCL BigFix Service Management	unaffected	Affected v27

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-307

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-82782		Advisory
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner HCL

Published Sep 18, 2026

Updated Sep 18, 2026

Reserved Jun 22, 2026

Link CVE-2026-56592

CISA Vulnrichment

Updated Sep 18, 2026

NVD

Status Undergoing Analysis

Modified Sep 18, 2026

Link CVE-2026-56592

Red Hat

No data

ENISA EUVD

Assigner HCL

Published Sep 18, 2026

Updated Sep 18, 2026

Link EUVD-2026-82782

GitHub

No data