Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-56570 EUVD-2026-51544GHSA-96vv-6p9m-jpxr

HCL iControl is affected by multiple security vulnerabilities.

Published Jul 31, 2026 · Updated Jul 31, 2026 · Assigned by HCL

Description

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser suggestions.

Affected products

VendorProductAffectedFixed
HCL Software HCL iControl 4.3.0 and 4.4.0 —

References