CVE-2025-59870CRITICAL 9.8EPSS p14.7%

CVE-2025-59870CVE-2025-59870

Description

HCL MyXalytics  is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.24% probability of exploitation · percentile 14.7% · 2026-08-04T12:00:14Z
Published2026-01-16
Last modified2026-01-23

Underlying weaknesses· 1

CWE-323

References

  1. https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128115

1

TypeTargetConfidenceTier
WeaknessReusing a Nonce, Key Pair in Encryptioncwe-3230%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-55278
CVE
CVE-2025-59874
CVE
CVE-2025-59852
CVE
CVE-2025-35940
CVE
CVE-2025-56749
CVE
CVE-2025-51606
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.