Dashboard / CVE-2026-66248

CVE-2026-66248

LOW
INFO Priority: 0.00 BB Relevance: 46/100
Published: 2026-10-01 Modified: 2026-11-09 First seen: 2026-11-09 Status: active

Attack Surface

Network No Interaction

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to plan advanced targeted attacks.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
HCL Software iControl v4.5.0

References & Advisories (1)

Bug Bounty Relevance

46 / 100
✓ Network accessible
✓ No user interaction

CVSS Score

3.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.16%
Raw Score 0.001590
Percentile 5.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00159
2026-11-12
0.00159
2026-11-10
0.00159
2026-11-09
0.00159

Intelligence Sources

mitre ref →
nvd ref →

External Links