{"id":"CVE-2026-56596","title":"HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended applicatio…","summary":"HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended applicatio…","severity":"low","cvss":3.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-20"],"vendor":"HCL Software","product":"HCL BigFix Service Management","affected":["hcl_bigfix_service_management Version 27"],"published":"2026-10-06","updated":"2026-10-06","sourceUpdated":"2026-10-06T16:00:36.547","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-56596","references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015","label":"psirt@hcl.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-06T12:47:29.783249Z"},"ingestedAt":"2026-10-06T12:59:11.018Z","slug":"CVE-2026-56596","body":"## Overview\n\nHCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":19,"depthScoreParts":{"impact":19.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}