CVE-2026-56537

LOW

HCL Connections is vulnerable to information disclosure

Title source: cna

Description

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data.

References (1)

Core 1

Core References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507

Scores

CVSS v3 3.5

EPSS 0.0016

EPSS Percentile 5.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-209

Status published

Products (1)

HCLSoftware/Connections 8.0

Published Jul 27, 2026

Tracked Since Jul 27, 2026