CVE-2026-35106

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...

CVE-2026-35105

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 78. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used...

CVE-2026-35107

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...

CVE-2026-35103

HCL AION is affected by an open redirect vulnerability on the role assignment pending page RoleAssignPending component. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing attacks,...

EUVD-2026-118260

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...

CVE-2026-35107 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...

CVE-2026-35107

The HCL AION platform is impacted by an open redirect vulnerability within the UserMenu component of the GenAI web interface. The root cause is that the application performs a redirect to a login page upon logout using a URL from the build configuration (NEXT_PUBLIC_LOGIN_URL ) without validating...

CVE-2026-35106 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...

CVE-2026-35106

HCL AION is affected by an open redirect vulnerability within the session-handling logic of the GenAI web interface . The flaw exists in the UserContext component (line 89), where a secondary redirect to the login page uses a URL from the NEXT_PUBLIC_LOGIN_URL build configuration without validati...

EUVD-2026-118259

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...

CVE-2026-35105

The HCL AION GenAI web interface is vulnerable to an open redirect due to a flaw in the session-handling logic within the UserContext component (line 78). The application redirects users to a login page using a URL from the NEXT_PUBLIC_LOGIN_URL build configuration without validating the destinat...

CVE-2026-35105 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 78. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used...

EUVD-2026-118258

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 78. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used...

CVE-2026-35103

The HCL AION platform is affected by an open redirect vulnerability within the RoleAssignPending component (role assignment pending page). The root cause is that the application redirects users to a login page using a URL from the build configuration (NEXT_PUBLIC_LOGIN_URL ) without performing de...

EUVD-2026-118256

HCL AION is affected by an open redirect vulnerability on the role assignment pending page RoleAssignPending component. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing attacks,...

CVE-2026-35103 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability on the role assignment pending page RoleAssignPending component. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing attacks,...

CVE-2026-35107: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface (UserMenu component)

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...

CVE-2026-35103: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability on the role assignment pending page (RoleAssignPending component)

HCL AION is affected by an open redirect vulnerability on the role assignment pending page RoleAssignPending component. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing attacks,...

CVE-2026-35106: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface…

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...