Dashboard / CVE-2026-56581

CVE-2026-56581

LOW
INFO Priority: 0.00 BB Relevance: 35/100
Published: 2026-07-21 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: Required
S: Unchanged
C: Low
I: None
A: None

Description

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
hcltech dryice_mycloud 10.8.1

References & Advisories (1)

Bug Bounty Relevance

35 / 100
✓ Network accessible

CVSS Score

2.6 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.15%
Raw Score 0.001530
Percentile 4.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00153
2026-10-28
0.00153

Intelligence Sources

nvd ref →

External Links