CVE-2026-56581

Summary

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

Affected Software

VendorProductVersion RangeStatus
HCLSoftwareMyCloud10.8.2affected

Weaknesses

  • CWE-614: CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References