What is CVE-2026-56581?

CVE-2026-56581 is a low-severity vulnerability in Hclsoftware Mycloud, classified under Sensitive Cookie in HTTPS Session Without 'Secure' Attribute. CVSS score: 2.6/10. Published 2026-07-21.

How severe is CVE-2026-56581?

Low severity. CVSS v3 base score is 2.6 out of 10.

Vulnerability in Hclsoftware Mycloud

CVE-2026-56581

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

CVSS v3 metric

CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N.

Affected products

Hclsoftware Mycloud — versions 10.8.2
Hcltech Mycloud — versions 10.8.1

Weakness classification (CWE)

CWE-614 — Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

References

psirt@hcl.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2026-56581?: CVE-2026-56581 is a low-severity vulnerability in Hclsoftware Mycloud, classified under Sensitive Cookie in HTTPS Session Without 'Secure' Attribute. CVSS score: 2.6/10. Published 2026-07-21.
How severe is CVE-2026-56581?: Low severity. CVSS v3 base score is 2.6 out of 10.