CVE-2025-52660

—

CVSS 3.1

9.8 critical

EPSS

<1%p22

Published

Jan 19, 2026 (Jan 19, 2026)

Modified

Jun 17, 2026

Description

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.

Vendors: hcltech
Products: aion
Weakness: CWE-644
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.