CVE-2026-56609
Received Received - Intake

Weak SSL/TLS Version Support in HCL iControl

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: HCL Software

Description
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-56609
EUVD
EUVD-2026-52261

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hcl icontrol *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-327 The product uses a broken or risky cryptographic algorithm or protocol.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

HCL iControl supports outdated and weak SSL/TLS versions like TLS 1.0 and 1.1. These protocols lack modern security protections, making them susceptible to attacks that could expose transmitted data.

Detection Guidance

To detect weak SSL/TLS versions like TLS 1.0 or 1.1 on your system or network, you can use tools like OpenSSL or Nmap. For OpenSSL, run: openssl s_client -connect <target>:<port> -tls1_1 or openssl s_client -connect <target>:<port> -tls1. For Nmap, use: nmap --script ssl-enum-ciphers -p <port> <target>. Check server configurations for enabled protocols.

Impact Analysis

Attackers may intercept sensitive data during transmission due to weak encryption. This could lead to unauthorized access to credentials, personal information, or other confidential data.

Compliance Impact

Using weak TLS versions violates requirements for strong encryption in GDPR and HIPAA. Non-compliance may result in legal penalties, data breach notifications, and reputational damage.

Mitigation Strategies

Disable TLS 1.0 and 1.1 protocols on affected systems. Update HCL iControl to the latest version that supports TLS 1.2 or higher. Configure servers to enforce TLS 1.2 or 1.3 only. Review and update firewall rules to block insecure traffic. Monitor network traffic for any continued use of weak protocols.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56609. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart