CVE-2026-66253 — HCL iControl is affected by a Session Timeout vulnerability
iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling unauthorized access to the …
Published: 2026-10-01 · CVSS: 3.1 · CVSS 3.1
iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling unauthorized access to the application and the ability to perform actions on behalf of the victim.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7