CVE-2026-66987mediumCWE-307

CVE-2026-66987: falha de média gravidade em HCL AION

HCL AION is affected by multiple security vulnerabilities.

Publicada em

Seguir esta CVE+ Monitorar AION

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

10Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3
HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated failed login attempts, allowing an attacker to make a large number of password guesses against a user account. This may increase the risk of account compromise through brute-force attacks, potentially resulting in unintended behavior or security impact under certain conditions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
HCL Software · HCL AION
CVEs relacionadas — HCL AION

No mesmo produto, das mais perigosas para as menos.

CVE-2026-66986LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66982LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66984LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-66981MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-21834LOWHCL AION is affected by multiple security vulnerabilities.EPSS —CVE-2026-21850MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS —