115 matches found
CVE-2026-56581
HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens...
CVE-2026-56582
HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...
CVE-2026-56578
HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions...
CVE-2026-56579
HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security...
CVE-2026-56583
Technical details are not publicly available in the provided documents. Monitor for updates from HCL and NVD to obtain affected versions, root cause, and remediation guidance.
EUVD-2026-46346
HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse...
CVE-2026-56582
CVE-2026-56582 affects HCL MyCloud, describing an SSL/TLS LUCKY13 padding-oracle vulnerability that could allow an attacker to decrypt sensitive data over the network. CVSS 3.1 (LOW) with Network attack, High complexity, Low privileges, No user interaction, and no impact to integrity/availability...
EUVD-2026-46345
HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...
CVE-2026-56581
CVE-2026-56581 affects HCL MyCloud with a Cookie Attribute Path Not Set issue. The vulnerability is described as enabling potential unauthorized access to session data or authentication tokens due to cookies not setting the Path attribute, increasing exposure. The available sources (NVD/CVELIST) ...
EUVD-2026-46344
HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens...
CVE-2026-56580
Technical details (affected product components, root cause, impact specifics, or remediation steps) are not publicly provided in the provided documents. Monitor for updates.
EUVD-2026-46343
HCL MyCloud was affected by Using Components with Known Vulnerability IIS Server . It may allow attackers to exploit publicly disclosed weaknesses and compromise the system...
CVE-2026-56579
CVE-2026-56579 concerns HCL MyCloud where a license key is exposed in HTTP responses, enabling potential misuse of exposed information and compromising application security. The available sources confirm the issue and describe the risk as arising from sensitive data leakage, but they do not speci...
EUVD-2026-46342
HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security...
EUVD-2026-46341
HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions...
CVE-2026-56578
Technical details about CVE-2026-56578 are not provided in the supplied documents; monitor for updates as information on affected versions, impact, and fixes is not publicly available here.
EUVD-2026-46340
HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks...
CVE-2026-56577
CVE-2026-56577 concerns HCL MyCloud and identifies a weak password policy as the root cause. The vulnerability allows credential-based access risks that could enable brute-force-style account compromises, with network-based exposure but no stated impact to data confidentiality, integrity, or non-...
CVE-2026-56577 HCL MyCloud affected by Weak Password Policy
HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks...
Western Digital MyCloud NAS - Authentication Bypass
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...