CVE-2026-56583 HCL MyCloud was affected with Concurrent Login Vulnerability.
Concurrent login flaws in HCL MyCloud allow unauthorized access, session hijacking, and account misuse by bypassing session limits.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-56583?
CVE-2026-56583 is a low-severity vulnerability in HCLSoftware MyCloud, published on 21 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse.
Weakness: CWE-613
Which versions are affected by CVE-2026-56583?
It affects 1 product.
Products include Hcltech Dryice Mycloud.
How do I fix CVE-2026-56583?
No fix has been published for CVE-2026-56583 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-56583 being exploited?
There is no known exploitation of CVE-2026-56583 in the wild and no public exploit code.
Other vulnerabilities in HCLSoftware MyCloud
- CVE-2023-23346 Use of a broken cryptographic algorithm affects HCL DRYiCE MyCloud
- CVE-2024-30150 An unauthenticated privilege escalation vulnerability affects HCL MyCloud
- CVE-2026-56577 HCL MyCloud affected by Weak Password Policy
- CVE-2026-56579 HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor.
- CVE-2026-56582 HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability.
Sources
Also known as GHSA-m9wm-8hw7-wg6x.