CVE-2026-56595: Hcl Software Hcl Bigfix Service Management

Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.

Affected products

• Hcl Software Hcl Bigfix Service Management: version v27 only

Published 2026-09-18. Last modified 2026-09-18.