{"id":"CVE-2026-56609","state":"PUBLISHED","title":"HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).","description":"HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.","publishedAt":"2026-08-03T11:26:07.457Z","updatedAt":"2026-08-03T13:17:58.577Z","severity":{"score":4.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","source":"HCL"},"assigner":"HCL","products":["HCL Software HCL iControl"],"affected":[{"vendor":"HCL Software","product":"HCL iControl","defaultStatus":"unaffected","versions":[{"version":"v3.2.0","status":"affected"}]}],"references":["https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132564"],"weaknesses":["CWE-327"],"ingestedAt":"2026-10-29T20:12:24.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/56xxx/CVE-2026-56609.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-56609","state":"PUBLISHED","datePublished":"2026-08-03T11:26:07.457Z","dateUpdated":"2026-08-03T13:17:58.577Z","assignerShortName":"HCL","assignerOrgId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","dateReserved":"2026-06-22T13:40:09.127Z"},"containers":{"cna":{"title":"HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).","descriptions":[{"lang":"en","value":"HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission."}],"affected":[{"vendor":"HCL Software","product":"HCL iControl","defaultStatus":"unaffected","versions":[{"version":"v3.2.0","status":"affected"}]}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132564"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":4.8,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-327","lang":"en","description":"CWE-327 Use of a Broken or Risky Cryptographic Algorithm","type":"CWE"}]}],"providerMetadata":{"shortName":"HCL","orgId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","dateUpdated":"2026-08-03T12:31:44.075Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-03T13:17:49.688193Z","id":"CVE-2026-56609","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-03T13:17:58.577Z"}}]}}}