CVE Catalog
CVE-2026-56586
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
Missing X-Content-Type-Options header in HCL IEM allows attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.
Risk Assessment
The risk involves potential data interception via man-in-the-middle attacks.
Recommendation
Configure the X-Content-Type-Options header and update HCL IEM.
Original NVD description (English source)
HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.