CVE-2026-56586 HCL IEM was affected with X-Content-Type-Options Header Missing
Missing X-Content-Type-Options header in HCL IEM allows attackers to perform SSL stripping or man-in-the-middle attacks to intercept sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-56586?
CVE-2026-56586 is a low-severity vulnerability in HCLSoftware IntelliOps Event Management, published on 21 Jul 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.
Weakness: CWE-16
Which versions are affected by CVE-2026-56586?
It affects 1 product.
Products include Hcltech Intelliops Event Management.
How do I fix CVE-2026-56586?
No fix has been published for CVE-2026-56586 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-56586 being exploited?
There is no known exploitation of CVE-2026-56586 in the wild and no public exploit code.
Other vulnerabilities in HCLSoftware IntelliOps Event Management
- CVE-2026-56584 HCL IEM was affected with the Information disclosure nginx server
- CVE-2026-56587 HCL IEM was affected with Strict transport security not enforced
- CVE-2025-0249 HCL IEM is affected by an improper invalidation of access or JWT token vulnerability
- CVE-2026-56585 HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing
- CVE-2025-0251 HCL IEM is affected by a concurrent login vulnerability
Sources
Also known as GHSA-qr5c-r7w7-xcqh.