CVE-2026-56581CWE-614

CVE-2026-56581

Low · published July 21, 2026

CVSS v3.1
2.6
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2026-07-21T22:17Z
Affected products (1)
ProductVersionsFixed in
hcltech/dryice_mycloudall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381 · [email protected]
EPSS history
Timeline
  • 21 JUL 17:37Z
    HCL MyCloud was affected with Cookie Attribute Path Not Set
    cvelistv5