Is CVE-2026-56608 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56608?

CVE-2026-56608 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-56608

Description

HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization.