CVE-2026-56590

Published: Set 18, 2026 Last Modified: Set 18, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,4
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: low
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: none

Description

AI Translation Available

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

434

Unrestricted Upload of File with Dangerous Type

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Confidentiality Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
Languages: ASP.NET, PHP, Not Language-Specific
Technologies: Web Server, AI/ML
Likelihood of Exploit: Medium
View CWE Details
https://support.hcl-software.com/csm?id=kb_article&sysparm_…
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917