PT-2026-25709 · Hcl · Aion

Published 2026-03-16 · Updated 2026-03-16 · CVE-2025-52648

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HCL AION (affected versions not specified)

Description HCL AION is susceptible to a security issue stemming from the absence of digital signatures on offering images. This lack of verification could permit the utilization of compromised or altered images, potentially resulting in system integrity breaches or unexpected system behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2025-52648

Affected Products

Aion

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-52648 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129410 · Vendor Advisory
• https://twitter.com/CVEnew/status/2033583641587314830 · Twitter Post