{"id":"CVE-2026-66249","published":"2026-10-01T14:17:30.213","lastModified":"2026-10-01T15:07:27.747","description":"iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers.","cvssScore":3.1,"cvssSeverity":"LOW","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-614"],"vendors":[],"products":[],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133940","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}