CVE-2026-56581
Undergoing Analysis Undergoing Analysis - In Progress

Cookie Attribute Path Not Set in HCL MyCloud

Publication date: 2026-07-21

Last updated on: 2026-07-21

Assigner: HCL Software

Description
HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-21
Last Modified
2026-07-21
Generated
2026-07-21
AI Q&A
2026-07-21
EPSS Evaluated
N/A
NVD
CVE-2026-56581
EUVD
EUVD-2026-46344

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hcltech mycloud 10.8.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-614 The Secure attribute for sensitive cookies in HTTPS sessions is not set.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

HCL MyCloud has a vulnerability where the Cookie Attribute Path is not set. This means session data or authentication tokens could be exposed to unauthorized access.

Impact Analysis

This vulnerability may allow attackers to steal session cookies or authentication tokens, potentially leading to unauthorized access to user accounts or sensitive data.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, potentially violating GDPR and HIPAA compliance requirements for data protection and security.

Mitigation Strategies

Enable HttpOnly and Secure flags for cookies in HCL MyCloud to prevent session hijacking. Review and update session management policies to ensure proper cookie attribute settings.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56581. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart