CVE-2026-56620

MediumCVSS 4.3/10Last modified Oct 24, 2026

Description

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-209

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
HCLSoftwareHCL BigFix Mobile<=3.6

References

Timeline

Published
Aug 10, 2026
Last modified
Oct 24, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-566237.1Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library for client-side and server-side SSH. CVE-2026-566247.3Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side and server-side SSH. CVE-2026-56639.8A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the fileCVE-2026-566428.8Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.CVE-2026-566437.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-566447.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-566458.8Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.CVE-2026-566466.5Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoCVE-2026-566478.8Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a neCVE-2026-566487.5Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a CVE-2026-566498.1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthoCVE-2026-56657.3A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionalit
CVE-2026-56620: Medium severity, CVSS 4.3 | Vulnix