CVE-2026-66986

HCL AION is affected by a vulnerability where user sessions do not expire after a sufficient period of inactivity (CWE-613). An unattended authenticated session could be accessed by another person with system access to view information or perform actions on behalf of the user, potentially leading...