CVE-2026-56537

LowCVSS 3.5

Published: 27/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

An information disclosure vulnerability in HCL Connections due to improper handling of request data. A user can obtain sensitive information they are not entitled to.

Risk Assessment

Unauthorized access to sensitive data could lead to information leakage and security policy violations.

Recommendation

Update HCL Connections to the latest patched version. Implement proper access controls.

Original NVD description (English source)

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data.