HCL Software iControl

• CVE-2026-66253 Low 3.1 HCL iControl is affected by a Session Timeout vulnerability 0.1%
• CVE-2026-66249 Low 3.1 HCL iControl is affected by a Missing Secure Attribute vulnerability 0.1%
• CVE-2026-66248 Low 3.1 HCL iControl is affected by an Improper Error Handling vulnerability 0.2%
• CVE-2026-66247 Medium 4.3 iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with included credentials, enablin 0.2%
• CVE-2026-66246 High 8.8 HCL iControl is affected by multiple security vulnerabilities 0.3%
• CVE-2025-62340 Low 3.1 HCL iControl was affected by Inadequate Session Timeout vulnerability 0.2%