CVE-2026-56538
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
An information disclosure vulnerability in HCL Connections via a specific endpoint. In certain scenarios, this could lead to sensitive information being disclosed to unauthorized users.
Risk Assessment
Disclosure of sensitive information could compromise data confidentiality and lead to unauthorized access.
Recommendation
Apply security updates from HCL for HCL Connections. Restrict endpoint access to trusted users.
Other vulnerabilities in HCL Connections
See all- CVE-2026-21827Low
HCL Connections is vulnerable to information disclosure, which could allow a user to obtain data they are not entitled to, caused by improper handling of request data.
- CVE-2025-62341Low
HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised, possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass.
- CVE-2026-56537Low
An information disclosure vulnerability in HCL Connections due to improper handling of request data. A user can obtain sensitive information they are not entitled to.
- CVE-2025-15619Low
A broken access control vulnerability in HCL Connections may allow an unauthorized user to view data in a single specific scenario.
Original NVD description (English source)
An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosing sensitive information to unauthorized users.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS