CVE-2026-66986: low-severity vulnerability in HCL AION
HCL AION is affected by multiple security vulnerabilities.
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
5Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3
HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended authenticated session could be used by another person with access to the same system to view information or perform actions on behalf of the user, potentially resulting in unintended behavior or security impact under certain conditions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
HCL Software · HCL AIONRelated CVEs — HCL AION
In the same product, most dangerous first.
CVE-2026-66987MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66982LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66984LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66981MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-21834LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-21850MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS —