Skip to content
OpenAdvisories
Low · 3.1 CVE-2026-66984 EUVD-2026-118313GHSA-f5m2-m3mg-fv2v

HCL AION is affected by multiple security vulnerabilities.

Published Nov 6, 2026 · Updated Nov 10, 2026 · Assigned by HCL

Description

HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This information could help an attacker understand the application structure and plan further attacks, potentially resulting in unintended behavior or security impact under certain conditions.

Affected products

VendorProductAffectedFixed
HCL Software HCL AION Version 2.7.0 —

References