CVE-2026-56597
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addres…
Published Sep 18, 2026 · updated Oct 14, 2026 · hcltech bigfix service management
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Sep 18, 2026 · NIST NVD
Detected
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.
Oct 14, 2026 · NIST NVD
Updated
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets.
Affected
- cpe hcltech/bigfix service management23
- cpe hcltech/bigfix service management27
Sources
- CVE.orgVulnerability recordCVE-2026-56597
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-56597
30-day exploitation probability 0.2%
first.org - NIST NVDVulnerability recordCVE-2026-56597
HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential
nvd.nist.gov