CVE-2026-56581

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

Score

CVSS 3.1 2.6 Low

Status

Analyzed - psirt@hcl.com

Published

2026-07-21

Last modified

2026-10-24

Weaknesses

CWE-614

Affected products

• Mycloud (Hclsoftware)
• Dryice Mycloud (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381