CVE-2026-56578 describes a vulnerability in HCLSoftware MyCloud (version 10.8.2) where the server version information is disclosed to unauthorized actors. This information leakage can aid attackers in reconnaissance by revealing the exact software version, potentially enabling targeted attacks against known vulnerabilities in that version. The vulnerability is categorized as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS 3.1 base score is 2.2, indicating low severity, with network attack vector, high attack complexity, and requiring high privileges. No integrity or availability impact is noted. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized actors to obtain server version details, which may facilitate the identification of other vulnerabilities specific to that version. However, the direct impact is limited to information disclosure without integrity or availability compromise. The low CVSS score reflects the limited severity of this exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to version information where possible and monitor for any updates from HCLSoftware regarding this vulnerability.