CVE-2026-56595

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management (affected versions not specified)

Description A CORS Misconfiguration exists due to improperly validated origin headers. Cross-Origin Resource Sharing (CORS) is a mechanism that allows restricted resources on a web page to be requested from another domain. This flaw allows an attacker to create a malicious web page that interacts with the application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.