CVE-2026-56580

LowCVSS 2.2/10Last modified Oct 24, 2026

Description

HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system.

Metrics

CVSS 3.1 2.2/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-1104

Affected software

No affected versions have been published.

Timeline

Published: Jul 21, 2026
Last modified: Oct 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-565812.6HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authenticati CVE-2026-565823.1HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information t CVE-2026-565833.1HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and accoun CVE-2026-565845.3HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target CVE-2026-565854.3HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious CVE-2026-565864.2HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attac CVE-2026-565873.7HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle atta CVE-2026-565897.2HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and CVE-2026-56596.3A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.__setstate__ of the f CVE-2026-565909.8HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could CVE-2026-565929.8HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, whi CVE-2026-565954.3HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could a