CVE-2026-35106

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...

CVE-2026-35105

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 78. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used...

CVE-2026-35106 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...

CVE-2026-35106

HCL AION is affected by an open redirect vulnerability within the session-handling logic of the GenAI web interface . The flaw exists in the UserContext component (line 89), where a secondary redirect to the login page uses a URL from the NEXT_PUBLIC_LOGIN_URL build configuration without validati...

EUVD-2026-118259

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...

CVE-2026-35105

The HCL AION GenAI web interface is vulnerable to an open redirect due to a flaw in the session-handling logic within the UserContext component (line 78). The application redirects users to a login page using a URL from the NEXT_PUBLIC_LOGIN_URL build configuration without validating the destinat...

CVE-2026-35105 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 78. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used...

EUVD-2026-118258

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 78. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used...

CVE-2026-35105: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface…

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 78. The redirect to the login page used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used...

CVE-2026-35106: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface…

HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface UserContext component, line 89. A second redirect to the login page in this component used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect...

PT-2024-8478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer exception in the sg remove sfp usercontext function. This exception occurs because sg device destroy is called after scsi device put, which sets th...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2019-42803)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A scripting engine memory corruption vulnerability exists in Microsoft Edge based on EdgeHTML. The vulnerability stems from a problem in the way the scripting engine handles objects in...