CVE-2026-56590: hcltech bigfix_service_management

CVSS 9.8 (critical) · published 2026-09-18

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Affected products (NVD): hcltech bigfix_service_management

Weakness: CWE-434

Source: NVD CVE-2026-56590

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.