What is GHSA-4929-xpw2-7hx7?

GHSA-4929-xpw2-7hx7 is a security advisory published by GitHub Security Advisories with Medium severity. HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to...

Which CVE IDs does GHSA-4929-xpw2-7hx7 cover?

GHSA-4929-xpw2-7hx7 covers the following CVE IDs: CVE-2026-56590. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4929-xpw2-7hx7?

GHSA-4929-xpw2-7hx7 has a CVSS v3 base score of 6.4, published by GitHub Security Advisories.

GHSA-4929-xpw2-7hx7MediumCVSS 6.4

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-56590 →

📋 Description

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-56590
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917
https://github.com/advisories/GHSA-4929-xpw2-7hx7