Is CVE-2026-56587 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-56587 being exploited in the wild.

How severe is CVE-2026-56587?

Low severity, with a CVSS score of 3.7, published 21 July 2026.

Which products and versions are affected?

HCL Software IntelliOps Event Management 1.1.

Is there a fix for CVE-2026-56587?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-56587 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-56587?

Check whether you run HCL Software IntelliOps Event Management at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-56587: HCL IntelliOps Event Management missing HSTS enforcement

CVE-2026-56587 · Severity: low · CVSS 3.7 · Published 2026-07-21

HCL IntelliOps Event Management, a platform used for monitoring and managing IT infrastructure events, fails to enforce HTTP Strict Transport Security (HSTS). This oversight could allow an attacker to intercept and view sensitive communications between a user's browser and the management console. In practice, this means an attacker on the same network could potentially capture login credentials or other private data by forcing the connection to use an unencrypted format.

Technologies: HCL Software IntelliOps Event Management. Vendors: HCL Software.

Quick answers

Is CVE-2026-56587 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-56587 being exploited in the wild.
How severe is CVE-2026-56587?: Low severity, with a CVSS score of 3.7, published 21 July 2026.
Which products and versions are affected?: HCL Software IntelliOps Event Management 1.1.
Is there a fix for CVE-2026-56587?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-56587 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-56587?: Check whether you run HCL Software IntelliOps Event Management at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

HCL IntelliOps Event Management (IEM) version 1.1 is vulnerable to CWE-523 (Unprotected Transport of Credentials) because it does not enforce HTTP Strict Transport Security (HSTS). This missing security header allows a network-positioned attacker to perform SSL stripping or man-in-the-middle (MITM) attacks by intercepting the initial unencrypted HTTP request and preventing the browser from upgrading to a secure HTTPS connection. If successful, the attacker can capture sensitive information, such as session tokens or credentials, transmitted in plain text. The vulnerability is rated low severity (CVSS 3.7) due to the high attack complexity required to intercept traffic in a typical network environment.

Affected products

HCL Software IntelliOps Event Management 1.1

Timeline

2026-07-21: disclosed: Initial publication of CVE-2026-56587
2026-07-21: advisory: HCL Software published security bulletin KB0132378

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.