CVE-2026-56582 identifies a cryptographic weakness in HCLSoftware MyCloud 10.8.2 related to the SSL/TLS LUCKY13 vulnerability. This vulnerability arises from the use of a broken or risky cryptographic algorithm (CWE-327) that enables an attacker to decrypt sensitive data by exploiting a TLS/SSL padding oracle side-channel. The CVSS v3.1 base score is 3.1, reflecting low impact primarily on confidentiality with no integrity or availability impact. The vulnerability requires network access with high attack complexity and low privileges, without user interaction. No vendor advisory or patch information is currently available, and the product is not a cloud service.

An attacker with network access and low privileges could exploit this vulnerability to decrypt sensitive information transmitted over TLS/SSL sessions with HCLSoftware MyCloud 10.8.2. The impact is limited to confidentiality loss; integrity and availability are not affected. The low CVSS score reflects the high complexity of attack and limited scope of impact. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider minimizing exposure of affected versions and using additional encryption layers if feasible. Monitor vendor communications for updates on patches or mitigations.