CVE-2026-35103

HCL AION is affected by an open redirect vulnerability on the role assignment pending page RoleAssignPending component. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing attacks,...

CVE-2026-35103

The HCL AION platform is affected by an open redirect vulnerability within the RoleAssignPending component (role assignment pending page). The root cause is that the application redirects users to a login page using a URL from the build configuration (NEXT_PUBLIC_LOGIN_URL ) without performing de...

EUVD-2026-118256

HCL AION is affected by an open redirect vulnerability on the role assignment pending page RoleAssignPending component. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing attacks,...

CVE-2026-35103 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability on the role assignment pending page RoleAssignPending component. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing attacks,...

CVE-2026-35103: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability on the role assignment pending page (RoleAssignPending component)

HCL AION is affected by an open redirect vulnerability on the role assignment pending page RoleAssignPending component. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing attacks,...