CVE-2026-56570: HCL iControl is affected by multiple security vulnerabilities.
HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser suggestions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56570?
The severity of CVE-2026-56570 is rated as low with a score of 3.7.
How does CVE-2026-56570 affect HCL iControl?
CVE-2026-56570 affects HCL iControl by exposing sensitive information such as valid usernames and email addresses due to auto-complete vulnerabilities.
What types of sensitive information can be compromised due to CVE-2026-56570?
Due to CVE-2026-56570, sensitive information that may be compromised includes valid usernames, email addresses used for login, and account identifiers.
Who is at risk with CVE-2026-56570 on shared environments?
Users accessing HCL iControl from shared environments are at risk of having valid usernames enumerated through browser suggestions due to CVE-2026-56570.
What immediate action should be taken to mitigate CVE-2026-56570?
To mitigate CVE-2026-56570, disable any auto-complete functionality on forms that handle sensitive information in HCL iControl.