CVE-2026-56567: HCL iControl is affected by multiple security vulnerabilities.
Published Jul 31, 2026
·Updated
HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.
Affected Software
2 affected components
HCL iControl=4.3.0
hcltech Icontrol=4.3.0
Event History
Jul 31, 2026
CVE Published
via MITRE·02:52 PM
Data Sourced
via MITRE·02:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-56567?
The severity of CVE-2026-56567 is classified as medium with a score of 5.1.
2
What vulnerabilities does CVE-2026-56567 expose in HCL iControl?
CVE-2026-56567 exposes security misconfiguration vulnerabilities that result in the public exposure of internal configuration files.
3
How can I fix CVE-2026-56567?
To fix CVE-2026-56567, ensure proper web server or application hardening to restrict access to internal configuration files.
4
Which version of HCL iControl is affected by CVE-2026-56567?
HCL iControl version 4.3.0 is affected by CVE-2026-56567.
5
What impact does CVE-2026-56567 have on system security?
CVE-2026-56567 can lead to unauthorized access to sensitive internal configuration files, potentially compromising security.