Session Management Vulnerability in HCL AION

CVE-2026-66986

What is CVE-2026-66986?

HCL AION is susceptible to a session management issue that permits user sessions to remain active beyond a reasonable inactivity duration. This means that an unattended authenticated session could be hijacked by another individual with access to the same machine, enabling unauthorized access to sensitive data or actions on behalf of the legitimate user. This can lead to potential misuse or security repercussions in various scenarios.

References