CVE-2026-56538

EUVD-2026-49183
An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosing sensitive information to unauthorized users.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.5 LOW
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 5.43%
Affected Products (NVD)
VendorProductVersion
hcltechconnections
𝑥
< 8.0
hcltechconnections
8.0
hcltechconnections
8.0:cumulative_release1
hcltechconnections
8.0:cumulative_release10
hcltechconnections
8.0:cumulative_release2
hcltechconnections
8.0:cumulative_release3
hcltechconnections
8.0:cumulative_release4
hcltechconnections
8.0:cumulative_release5
hcltechconnections
8.0:cumulative_release6
hcltechconnections
8.0:cumulative_release7
hcltechconnections
8.0:cumulative_release8
hcltechconnections
8.0:cumulative_release9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507