CVE-2026-56609
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.8
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
- EPSS probability
- 0.10%
- CWE
- CWE-327
- Published
- 2026-08-03
- Last modified
- 2026-08-03
Affected products
- HCL Software HCL iControl
Weakness type
Related vulnerabilities
- CVE-2026-81822 — AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm
- CVE-2026-69382 — Microsoft Exchange Server Information Disclosure Vulnerability
- CVE-2026-16693 — IBM i is Affected By Cryptographic Algorithm Weakness in DCM []
- CVE-2026-81859 — Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- CVE-2026-76133 — Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm
- CVE-2026-39944 — Ceph: CephX AES Authentication error
- CVE-2025-30156 — Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery
- CVE-2026-77151 — lin-snow Ech0 crypto.go MD5Encrypt risky encryption