HCL AION Vulnerability Exposing Internal Server File Paths

CVE-2026-66984

What is CVE-2026-66984?

HCL AION contains a vulnerability that allows the disclosure of internal server file system paths in certain application responses. This exposure can provide attackers with insights into the application's architecture, potentially enabling them to plan further attacks. Organizations using HCL AION should assess their systems and implement appropriate measures to mitigate this risk and protect sensitive information.

References