Skip to content
OpenAdvisories
Low · 3.1 CVE-2026-66248 EUVD-2026-90815GHSA-945v-8gc2-cph3

HCL iControl is affected by an Improper Error Handling vulnerability

Published Oct 1, 2026 · Updated Nov 9, 2026 · Assigned by HCL

Description

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks.

Affected products

VendorProductAffectedFixed
HCL Software iControl v4.5.0 —

References