CVE WATCH / VULNERABILITY DETAIL
CVE-2026-35104
MEDIUMCVSS 4.7NVD feed
Published 6 November 2026 · tracked since 7 November 2026
Description
HCL AION is affected by an open redirect vulnerability on the user registration page (Signup component). The redirect performed after registration used the value of the 'redirect' query parameter without validation, so a crafted registration link could send a user to an untrusted external site. This
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-123998 HIGH 8.3
- CVE-2026-119924 HIGH 8.1
- CVE-2026-119923 CRITICAL 9.8
- CVE-2026-108262 MEDIUM 6.5
- CVE-2026-100080
- CVE-2026-89017 HIGH 7.5
- CVE-2026-75598 MEDIUM 6.3
- CVE-2026-123824 MEDIUM 6.3
- CVE-2026-102650 HIGH 7.5
- CVE-2026-85743 HIGH 8.2