CVE-2026-56595

3.1 LOW

Published 2026-09-18 · Updated 2026-09-18

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses

CWE-942

All references

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-66070PoC
UNSCOREDCVE-2026-90882
LOWCVE-2026-92359PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.