LOW 3.1 NVD

CVE-2026-66249

iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connectio

iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133940

Published: 2026-10-01 · Source: NVD · Feed updated: 2026-10-01

This low severity vulnerability with a CVSS score of 3.1 was published on 2026-10-01 via NVD.

vulnfeed aggregates 12641 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.