CVE-2025-52648

HCL AION is affected by a vulnerability where offering images are not digitally signed

Medium · published March 16, 2026

CVSS v3.1
4.8
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Published
2026-03-16T12:53Z
EPSS history
Timeline
  • 16 MAR 12:53Z
    HCL AION is affected by a vulnerability where offering images are not digitally signed
    cvelistv5