CVE-2026-56609 PUBLISHED

HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).

Assigner: HCL
Reserved: 22.06.2026 Published: 03.08.2026 Updated: 03.08.2026

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS Score: 4.8

Product Status

Vendor HCL Software
Product HCL iControl
Versions Default: unaffected
  • Version v3.2.0 is affected

References

Problem Types

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm CWE