CVE-2026-56586

MediumCVSS 4.2/10Last modified Oct 24, 2026

Description

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.

Metrics

CVSS 3.1 4.2/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-16

Affected software

No affected versions have been published.

Timeline

Published: Jul 21, 2026
Last modified: Oct 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-565873.7HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle atta CVE-2026-565897.2HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and CVE-2026-56596.3A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.__setstate__ of the f CVE-2026-565909.8HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could CVE-2026-565929.8HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, whi CVE-2026-565954.3HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could a CVE-2026-565963.5HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected CVE-2026-565975.3HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to CVE-2026-565992.2HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to expl CVE-2026-56606.3A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /CVE-2026-566085.3HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowin CVE-2026-566096.5HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions s