Skip to content
OpenAdvisories
High · 8.8 CVE-2026-66246 EUVD-2026-90813GHSA-3hwm-64f6-4634

HCL iControl is affected by multiple security vulnerabilities

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by HCL

Description

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR), enabling privilege escalation and the unauthorized modification or deletion of sensitive application data.

Affected products

VendorProductAffectedFixed
HCL Software iControl v4.5.0 —

References