Vulnerability · Published Aug 3, 2026 · Assigned by HCL
CVE-2026-56609HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).
Medium 4.8
In plain English
A medium-severity broken cryptography in HCL iControl from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)0.2%top 95.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | HCL iControl | v3.2.0 |
Weakness: CWE-327 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N