Nixpkgs security tracker

Untriaged

Permalink CVE-2026-56577

3.1 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

HCL MyCloud affected by Weak Password Policy

HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381 vendor-advisory

Affected products

MyCloud

==10.8.2

Matching in nixpkgs

pkgs.deye-dummycloud

A dummy cloud server for DEYE microinverters (Node.js) and bridge to mqtt

nixos-unstable -
- nixos-unstable-small
nixos-26.05 -
- nixos-26.05-small

Package maintainers

@poeschel Lars Pöschel <poeschel@mailbox.org>

Untriaged

Permalink CVE-2026-56579

3.1 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor.

HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381 vendor-advisory

Affected products

MyCloud

==10.8.2

Matching in nixpkgs

pkgs.deye-dummycloud

A dummy cloud server for DEYE microinverters (Node.js) and bridge to mqtt

nixos-unstable -
- nixos-unstable-small
nixos-26.05 -
- nixos-26.05-small

Package maintainers

@poeschel Lars Pöschel <poeschel@mailbox.org>

Untriaged

Permalink CVE-2026-56581

2.6 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

HCL MyCloud was affected with Cookie Attribute Path Not Set

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381 vendor-advisory

Affected products

MyCloud

==10.8.2

Matching in nixpkgs

pkgs.deye-dummycloud

A dummy cloud server for DEYE microinverters (Node.js) and bridge to mqtt

nixos-unstable -
- nixos-unstable-small
nixos-26.05 -
- nixos-26.05-small

Package maintainers

@poeschel Lars Pöschel <poeschel@mailbox.org>

Untriaged

Permalink CVE-2026-56583

3.1 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

HCL MyCloud was affected with Concurrent Login Vulnerability.

HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381 vendor-advisory

Affected products

MyCloud

==10.8.2

Matching in nixpkgs

pkgs.deye-dummycloud

A dummy cloud server for DEYE microinverters (Node.js) and bridge to mqtt

nixos-unstable -
- nixos-unstable-small
nixos-26.05 -
- nixos-26.05-small

Package maintainers

@poeschel Lars Pöschel <poeschel@mailbox.org>

Untriaged

Permalink CVE-2026-56580

2.2 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

HCL MyCloud was affected by Using Components with Known Vulnerability

HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381 vendor-advisory

Affected products

MyCloud

==10.8.2

Matching in nixpkgs

pkgs.deye-dummycloud

A dummy cloud server for DEYE microinverters (Node.js) and bridge to mqtt

nixos-unstable -
- nixos-unstable-small
nixos-26.05 -
- nixos-26.05-small

Package maintainers

@poeschel Lars Pöschel <poeschel@mailbox.org>

Untriaged

Permalink CVE-2026-56578

2.2 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

HCL MyCloud was affected by Server Version Disclosure

HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381 vendor-advisory

Affected products

MyCloud

==10.8.2

Matching in nixpkgs

pkgs.deye-dummycloud

A dummy cloud server for DEYE microinverters (Node.js) and bridge to mqtt

nixos-unstable -
- nixos-unstable-small
nixos-26.05 -
- nixos-26.05-small

Package maintainers

@poeschel Lars Pöschel <poeschel@mailbox.org>

Untriaged

Permalink CVE-2026-56582

3.1 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability.

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132381 vendor-advisory

Affected products

MyCloud

==10.8.2

Matching in nixpkgs

pkgs.deye-dummycloud

A dummy cloud server for DEYE microinverters (Node.js) and bridge to mqtt

nixos-unstable -
- nixos-unstable-small
nixos-26.05 -
- nixos-26.05-small

Package maintainers

@poeschel Lars Pöschel <poeschel@mailbox.org>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.deye-dummycloud

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.deye-dummycloud

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.deye-dummycloud

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.deye-dummycloud

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.deye-dummycloud

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.deye-dummycloud

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.deye-dummycloud

Package maintainers