CVE-2026-56582
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
HCL MyCloud is affected by the SSL/TLS LUCKY13 vulnerability. An attacker can decrypt sensitive information via a TLS/SSL padding oracle attack.
Risk Assessment
Risk of intercepting and decrypting confidential data over encrypted connections, potentially leading to data breach.
Recommendation
Update HCL MyCloud to a patched version. Implement additional TLS protections, such as disabling old cipher suites.
Other vulnerabilities in HCL MyCloud
See all- CVE-2026-56583Low
Concurrent Login vulnerability in HCL MyCloud increases the risk of unauthorized access, session hijacking, and account misuse.
- CVE-2026-56581Low
HCL MyCloud has a missing Cookie Attribute Path vulnerability. This increases the risk of unauthorized access to session data or authentication tokens.
- CVE-2026-56580Low
HCL MyCloud is affected by using components with known vulnerabilities (IIS Server). This may allow attackers to exploit publicly disclosed weaknesses and compromise the system.
- CVE-2026-56579Low
Vulnerability in HCL MyCloud exposes the license key in HTTP responses. Attackers can misuse this information to compromise application security.
- CVE-2026-56578Low
HCL MyCloud exposes the server version, which may help attackers identify and exploit known vulnerabilities for the disclosed software versions.
- CVE-2026-56577Low
HCL MyCloud was affected with a weak password policy, increasing the risk of account compromise through brute-force or credential-based attacks.
Original NVD description (English source)
HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS