Session Fixation Vulnerability in HCL Aftermarket DPC Software
CVE-2025-55266

5.9MEDIUM

Key Information:

Vendor
CVE Published:
26 March 2026

What is CVE-2025-55266?

HCL Aftermarket DPC has a session fixation vulnerability that enables attackers to hijack active user sessions. By exploiting this flaw, an attacker can execute unauthorized transactions by impersonating the legitimate user, leading to potential data breaches and financial losses. It is essential for users of HCL Aftermarket DPC to be vigilant and implement necessary security measures to protect against this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Aftermarket DPC version 1.0.0

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.