License Key Exposure in HCL MyCloud Software
CVE-2026-56579

3.1LOW

Key Information:

Vendor

HCL Softwaresoftware

Status
Mycloud
Vendor
CVE Published:
21 July 2026

What is CVE-2026-56579?

HCL MyCloud is impacted by a vulnerability that reveals license keys within HTTP responses. This exposure may allow adversaries to exploit the sensitive information, potentially compromising the application's overall security and integrity. Users are advised to take immediate action to mitigate the risk.

Affected Version(s)

MyCloud 10.8.2

References

https://support.hcl-software.com/csm?id=kb_article&syspar...
vendor-advisory

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.