ZeroDay Findings
Sign inSign up

Findings

CVE-2026-56590

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated a…

Published Sep 18, 2026 · updated Oct 14, 2026 · hcltech bigfix service management

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 18, 2026 · NIST NVD

    Detected

    HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

  2. Oct 14, 2026 · NIST NVD

    Updated

    HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

Affected

  • cpe hcltech/bigfix service management23
  • cpe hcltech/bigfix service management27

Sources

  • CVE.orgCVE-2026-56590

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-56590

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDCVE-2026-56590

    HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

    nvd.nist.gov

References