CVE-2026-56581

LowCVSS 2.6

Published: 21/07/2026(UTC)Updated: 03/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

HCL MyCloud has a missing Cookie Attribute Path vulnerability. This increases the risk of unauthorized access to session data or authentication tokens.

Risk Assessment

Risk of session hijacking, leading to unauthorized access to user accounts and data.

Recommendation

Configure the application to set the Path attribute in session cookies. Update HCL MyCloud to a patched version.

Original NVD description (English source)

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.