Open Redirect Vulnerability in HCL AION User Registration

CVE-2026-35104

What is CVE-2026-35104?

HCL AION has a vulnerability in its user registration component that allows attackers to exploit an open redirect flaw. This occurs when the application redirects users to external sites after registration without properly validating the 'redirect' query parameter. An attacker could craft a malicious link that misleads users, potentially leading them to untrusted external sites. This vulnerability poses risks of phishing attacks, which may exploit users' trust, resulting in unintended actions or security risks. It is essential for users and administrators to ensure that proper validation is implemented to mitigate this risk.

References