CVE-2026-56590 in BigFix Service Management

Zusammenfassung

von MITRE • 18.09.2026

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Zuständig: HCL
• Reservieren: 22.06.2026
• Veröffentlichung: 18.09.2026
• Moderieren: akzeptiert
• Eintrag: VDB-407453
• CPE: bereit
• CWE: CWE-434 (bestätigt)
• CVSS: 6.4 (CNA)
• EPSS: 0.00000
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-56590
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-56590
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-56590/