CVE-2026-56579— HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor.
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| HCLSoftware | MyCloud | 10.8.2 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56579
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor.
Source: NVD (National Vulnerability Database)
Vulnerability Description
HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HCLSoftware | MyCloud | 10.8.2 | - |
II. Public POCs for CVE-2026-56579
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-56579
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-56579 (1)
Same Patch Batch · HCLSoftware · 2026-07-21 · 13 CVEs total
| CVE-2026-56587 | 3.7 LOW | HCL IEM was affected with Strict transport security not enforced |
| CVE-2026-56584 | 3.7 LOW | HCL IEM was affected with the Information disclosure nginx server |
| CVE-2026-56586 | 3.1 LOW | HCL IEM was affected with X-Content-Type-Options Header Missing |
| CVE-2026-56585 | 3.1 LOW | HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing |
| CVE-2026-56577 | 3.1 LOW | HCL MyCloud affected by Weak Password Policy |
| CVE-2026-56583 | 3.1 LOW | HCL MyCloud was affected with Concurrent Login Vulnerability. |
| CVE-2026-56582 | 3.1 LOW | HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability. |
| CVE-2026-56581 | 2.6 LOW | HCL MyCloud was affected with Cookie Attribute Path Not Set |
| CVE-2026-56578 | 2.2 LOW | HCL MyCloud was affected by Server Version Disclosure |
| CVE-2026-56580 | 2.2 LOW | HCL MyCloud was affected by Using Components with Known Vulnerability |
| CVE-2023-37508 | HCL DevOps Plan is susceptible to a Cross-Site Scripting (XSS) vulnerability | |
| CVE-2023-37507 | An information disclosure vulnerability affects HCL DevOps Plan |
IV. Related Vulnerabilities
Same product: MyCloud
- CVE-2026-56583
HCL MyCloud was affected with Concurrent Login Vulnerability - CVE-2026-56582
HCL MyCloud was affected with SSL/TLS Protocol Affected with - CVE-2026-56581
HCL MyCloud was affected with Cookie Attribute Path Not Set - CVE-2026-56580
HCL MyCloud was affected by Using Components with Known Vuln - CVE-2026-56578
HCL MyCloud was affected by Server Version Disclosure
Same vendor: HCLSoftware
- CVE-2026-56583
HCL MyCloud was affected with Concurrent Login Vulnerability - CVE-2026-56582
HCL MyCloud was affected with SSL/TLS Protocol Affected with - CVE-2026-56581
HCL MyCloud was affected with Cookie Attribute Path Not Set - CVE-2026-56580
HCL MyCloud was affected by Using Components with Known Vuln - CVE-2026-56578
HCL MyCloud was affected by Server Version Disclosure
Same weakness: CWE-200
- CVE-2026-47247
libheif Vulnerable to Heap Information Disclosure via Grid I - CVE-2026-56578
HCL MyCloud was affected by Server Version Disclosure - CVE-2026-47395
PraisonAI CLI automatically resolves @url mentions in prompt - CVE-2026-56584
HCL IEM was affected with the Information disclosure nginx s - CVE-2026-65009
OpenRemote before 1.26.2 Information Disclosure via Syslog R
V. Comments for CVE-2026-56579
No comments yet