Is CVE-2026-56595 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56595?

CVE-2026-56595 has a CVSS v3 severity of LOW (3.1).

Back

CVE-2026-56595

Description

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.