CVE-2025-55252: Hcltech Aion

Critical severity, CVSS 9.8. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL AION  version 2 is affected by a Weak Password Policy vulnerability. This can  allow the use of easily guessable passwords, potentially resulting in unauthorized access

Affected products

Published 2026-01-19. Last modified 2026-06-17.