CVE-2026-56577
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
HCL MyCloud was affected with a weak password policy, increasing the risk of account compromise through brute-force or credential-based attacks.
Risk Assessment
The organization is at increased risk of user account compromise in HCL MyCloud, potentially leading to unauthorized access to data and systems.
Recommendation
Implement a stronger password policy, including requirements for long and complex passwords, and enable multi-factor authentication (MFA).
Other vulnerabilities in HCL MyCloud
See all- CVE-2026-56583Low
Concurrent Login vulnerability in HCL MyCloud increases the risk of unauthorized access, session hijacking, and account misuse.
- CVE-2026-56582Low
HCL MyCloud is affected by the SSL/TLS LUCKY13 vulnerability. An attacker can decrypt sensitive information via a TLS/SSL padding oracle attack.
- CVE-2026-56581Low
HCL MyCloud has a missing Cookie Attribute Path vulnerability. This increases the risk of unauthorized access to session data or authentication tokens.
- CVE-2026-56580Low
HCL MyCloud is affected by using components with known vulnerabilities (IIS Server). This may allow attackers to exploit publicly disclosed weaknesses and compromise the system.
- CVE-2026-56579Low
Vulnerability in HCL MyCloud exposes the license key in HTTP responses. Attackers can misuse this information to compromise application security.
- CVE-2026-56578Low
HCL MyCloud exposes the server version, which may help attackers identify and exploit known vulnerabilities for the disclosed software versions.
Original NVD description (English source)
HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS