CVE-2026-66984

CVSS 3.1 (low) · published 2026-11-06

HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This information could help an attacker understand the application structure and plan further attacks, potentially resulting in unintended behavior or security impact under certain conditions.

Weakness: CWE-200

Source: NVD CVE-2026-66984

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.