SSL/TLS Vulnerability in HCL MyCloud
CVE-2026-56582

3.1LOW

Key Information:

Vendor

HCL Softwaresoftware

Status
Mycloud
Vendor
CVE Published:
21 July 2026

What is CVE-2026-56582?

HCL MyCloud has been identified as susceptible to a significant SSL/TLS vulnerability commonly referred to as the LUCKY13 issue. This vulnerability allows malicious actors to exploit a TLS/SSL padding oracle attack, potentially enabling them to decrypt sensitive information transmitted over secure channels. Organizations utilizing HCL MyCloud should take prompt action to mitigate this risk and ensure the protection of their data from unauthorized access.

Affected Version(s)

MyCloud 10.8.2

References

https://support.hcl-software.com/csm?id=kb_article&syspar...
vendor-advisory

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.