PatchTheCVEicontrol vulnerabilities and fixes
Recent CVEs affecting icontrol, with upgrade or downgrade steps. 7 tracked.
icontrol has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-08-03. Highest priority: CVE-2026-56568 (score 24/100).
- CVE-2026-56568 LOW 3.7 DOWNGRADE HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabiliti
- CVE-2026-56570 LOW 3.7 DOWNGRADE HCL iControl was affected by Auto complete Enabled vulnerabilities
- CVE-2026-56571 LOW 3.7 DOWNGRADE HCL iControl was affected by Improper Error Handling vulnerabilities
- CVE-2026-56567 MEDIUM 5.1 DOWNGRADE HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities
- CVE-2026-56569 MEDIUM 4.0 DOWNGRADE HCL iControl was affected by Sensitive Data Exposure vulnerabilities
- CVE-2026-56608 LOW 3.7 DOWNGRADE HCL iControl is affected by Missing Access Control vulnerability
- CVE-2026-56609 MEDIUM 4.8 DOWNGRADE HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability
FAQ
How do I fix icontrol vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is icontrol being exploited right now?
None of the tracked icontrol CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which icontrol CVE should I patch first?
CVE-2026-56568 currently ranks highest (24/100): HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabiliti.