Information Disclosure Vulnerability in HCL BigFix Mobile
CVE-2026-56620

4.3MEDIUM

Key Information:

Vendor

HCL Softwaresoftware

Status
HCL Software Bigfix Mobile
Vendor
CVE Published:
10 August 2026

What is CVE-2026-56620?

HCL BigFix Mobile is susceptible to information disclosure due to insufficient exception handling and overly verbose error messages. This vulnerability may allow unauthorized individuals to gain access to sensitive information unintentionally exposed by the application's error responses. It is crucial for users and administrators of HCL BigFix Mobile to implement the latest patches and review their error handling protocols to mitigate potential risks.

Affected Version(s)

HCL BigFix Mobile <=3.6

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.