Sensitive Login Form Vulnerability in HCL AION

CVE-2026-66982

What is CVE-2026-66982?

HCL AION is impacted by a vulnerability where the browser's autocomplete feature is enabled on sensitive login fields. This misconfiguration allows browsers to save and suggest previously entered credentials, potentially exposing users to unauthorized access. If a malicious actor gains access to the same browser or system, they could retrieve stored login information, leading to serious security implications. It is crucial for users to be aware of this risk and ensure that sensitive fields are properly secured against such vulnerabilities. For more information, visit the HCL support article.

References