CVE-2026-56619

HCL BigFix Mobile is susceptible to reflected cross-site scripting (XSS) due to inadequate validation and output encoding of user-controlled input. This vulnerability could allow attackers to execute arbitrary scripts in the context of a user's session, potentially leading to data theft or session hijacking. Organizations using HCL BigFix Mobile should prioritize addressing this issue to mitigate risks associated with user data compromise.