Vulnerability Details CVE-2026-56592
HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 37.1%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-56592
-
cpe:2.3:a:hcltech:bigfix_service_management:23
-
cpe:2.3:a:hcltech:bigfix_service_management:27