Hcltech Dryice Mycloud vulnerabilities

9 CVEs affecting Hcltech Dryice Mycloud, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-56583, published 2026-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-30150, published 2025-02-25. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery…
CVE-2026-56577, published 2026-07-21. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks.
CVE-2026-56580, published 2026-07-21. Low severity, CVSS 2.2. EPSS: 0.3% chance of exploitation in the next 30 days. HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system.
CVE-2026-56578, published 2026-07-21. Low severity, CVSS 2.2. EPSS: 0.3% chance of exploitation in the next 30 days. HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions.
CVE-2026-56579, published 2026-07-21. Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days. HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security.
CVE-2026-56583, published 2026-07-21. Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days. HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse.
CVE-2026-56582, published 2026-07-21. Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days. HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.
CVE-2026-56581, published 2026-07-21. Low severity, CVSS 2.6. EPSS: 0.2% chance of exploitation in the next 30 days. HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.
CVE-2023-23346, published 2023-08-09. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information.