CVE-2026-66987: fallo de gravedad media en HCL AION
HCL AION is affected by multiple security vulnerabilities.
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
10Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3
HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated failed login attempts, allowing an attacker to make a large number of password guesses against a user account. This may increase the risk of account compromise through brute-force attacks, potentially resulting in unintended behavior or security impact under certain conditions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Productos afectados
HCL Software · HCL AIONCVEs relacionadas — HCL AION
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-66986LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66982LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66984LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66981MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-21834LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-21850MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS —