3.1Low

CVE-2026-66984HCL AION is affected by multiple security vulnerabilities.

HCL Software HCL AION Published: (8 days ago)

Description

HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This information could help an attacker understand the application structure and plan further attacks, potentially resulting in unintended behavior or security impact under certain conditions.

Weakness (CWE): CWE-200

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
HCL Software HCL AION Version 2.7.0

References and patches