# CVE-2026-56609

## Summary

- **CVE ID:** CVE-2026-56609
- **Severity:** MEDIUM
- **CVSS Score:** 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
- **CWE:** CWE-327
- **Published:** Aug 3, 2026
- **Last Modified:** Aug 3, 2026

## Description

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.

## Affected Products

- HCL Software — HCL iControl (v3.2.0)

## References

- [CNA](https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132564)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.10%
- **EPSS Percentile:** 0.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._