CVE-2025-52606

HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

• CWE-209

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131178Vendor Advisory

Published

Jun 4, 2026

Last Modified

Jul 22, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-52599Cybersecurity Nozomi Networks Labs, a specialized security c…6.5
• CVE-2025-5260Server-Side Request Forgery (SSRF) vulnerability in Pik Onli…8.6
• CVE-2025-52600Cybersecurity Nozomi Networks Labs, a specialized security c…7.2
• CVE-2025-52601Cybersecurity Nozomi Networks Labs, a specialized security c…7.8
• CVE-2025-52602HCL BigFix Query is affected by a sensitive information disc…4.2
• CVE-2025-52603HCL Connections is vulnerable to information disclosure. In…3.5
• CVE-2025-52608HCL iControl was affected by Missing Cookie Attributes vuln…4.3
• CVE-2025-52609HCL iControl was affected by Missing Security Headers vulner…5.3
• CVE-2025-5261Authorization Bypass Through User-Controlled Key vulnerabili…7.5
• CVE-2025-52611HCL iControl v4.0.0 was affected by Unhandled Exception - St…4.3
• CVE-2025-52612HCL iControl was affected by Export CSV - CSV Injection vuln…8.8
• CVE-2025-52613HCL BigFix Service Management (SM) is affected by use of a v…8.8