CVE-2025-55269: Hcltech Aftermarket Cloud

Critical severity, CVSS 9.8. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorized access to user accounts.

Affected products

• Hcltech Aftermarket Cloud: version 1.0.0 only

Published 2026-03-26. Last modified 2026-06-17.