CVE-2026-66248: Hcl Software Icontrol

Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days.

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks.

Affected products

• Hcl Software Icontrol: version v4.5.0 only

Published 2026-10-01. Last modified 2026-10-01.