CVE-2026-56609: Hcltech Icontrol

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.

Affected products

• Hcltech Icontrol: version 3.2.0 only

Published 2026-08-03. Last modified 2026-08-05.