CVE-2026-56538 Details
Description
An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosing sensitive information to unauthorized users.
A vulnerability allowing information disclosure has been identified in HCL Connections version 8.0. This issue arises from improper handling of request data, which could enable unauthorized users to access sensitive information.
Users can upgrade to Cumulative Fixpack HCL Connections v8.0 CR11 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507 | [email protected] | Vendor AdvisoryPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-213 | Exposure of Sensitive Information Due to Incompatible Policies | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| hcltech connections | < 8.0 8.0 - 8.0 cumulative_release1 8.0 cumulative_release10 8.0 cumulative_release2 8.0 cumulative_release3 8.0 cumulative_release4 8.0 cumulative_release5 8.0 cumulative_release6 8.0 cumulative_release7 8.0 cumulative_release8 8.0 cumulative_release9 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 20, 2026 | Initial Analysis | [email protected] |
| Jul 27, 2026 | CVE Modified | CISA-ADP |
| Jul 27, 2026 | New CVE Received | [email protected] |