CVE-2026-56537

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data.

CVSS 3.1

3.5CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

EPSS

0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-25)

CWE

CWE-209

Published

2026-07-27

Modified

2026-10-24

Record from

the NVD, synced 2026-10-24

Affected

• hcltech:connections

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507

Check your stackJSON