CVE-2026-56592: hcltech bigfix_service_management

CVSS 9.8 (critical) · published 2026-09-18

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.

Affected products (NVD): hcltech bigfix_service_management

Weakness: CWE-307

Source: NVD CVE-2026-56592

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.