CVE-2026-56580: Use of Unmaintained Third Party Components

HCL MyCloud was affected by Using Components with Known Vulnerability IIS Server . It may allow attackers to exploit publicly disclosed weaknesses and compromise the system...

CVE-2026-56577: Weak Password Requirements

HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks...

CVE-2026-56585: Protection Mechanism Failure

HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions...

CVE-2026-56584: Exposure of Sensitive Information to an Unauthorized Actor

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

CVE-2023-37507: Exposure of Sensitive System Information to an Unauthorized Control Sphere

HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed...

CVE-2026-56587: Unprotected Transport of Credentials

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications...

PT-2026-61823

Name of the Vulnerable Software and Affected Versions HCL DevOps Plan affected versions not specified Description HCL DevOps Plan is potentially susceptible to Cross-Site Scripting XSS, a flaw that allows attackers to inject malicious scripts into web pages viewed by other users, which could be...

CVE-2026-56586: Undefined Security Weakness

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

PT-2026-62008

Name of the Vulnerable Software and Affected Versions HCL MyCloud affected versions not specified Description HCL MyCloud is susceptible to the LUCKY13 vulnerability, which allows an attacker to decrypt sensitive information. This is achieved through a TLS/SSL padding oracle attack, a side-channe...

CVE-2026-56581: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens...

PT-2026-61825

Name of the Vulnerable Software and Affected Versions HCL DevOps Plan affected versions not specified Description HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed. Recommendations At the moment, there...

PT-2026-62007

Name of the Vulnerable Software and Affected Versions HCL MyCloud affected versions not specified Description The software does not set the path attribute for cookies, which may increase the risk of unauthorized access to session data or authentication tokens. Recommendations At the moment, there...

CVE-2026-56582: Use of a Broken or Risky Cryptographic Algorithm

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

PT-2026-62004

Name of the Vulnerable Software and Affected Versions HCL MyCloud affected versions not specified Description The software is subject to Server Version Disclosure, a condition where the server reveals its specific version information. This disclosure can assist attackers in identifying and...

CVE-2026-21824

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations...

CVE-2026-21824 A privilege escalation vulnerability affects HCL Commerce

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations...

CVE-2026-21824

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-21824 A privilege escalation vulnerability affects HCL Commerce

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations...

PT-2026-61597

Name of the Vulnerable Software and Affected Versions HCL Commerce affected versions not specified Description A privilege escalation issue exists that could enable an attacker to perform unauthorized administrative operations, cause a denial of service, or disclose personal data of users...

CVE-2026-21824: Incorrect Privilege Assignment

HCL Commerce contains an privilege escalation vulnerability that could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations...