CVE-2025-52648
HCL AION is affected by a vulnerability where offering images are not digitally signed.
Published Mar 16, 2026 · updated Jun 17, 2026 · hcl aion
HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 16, 2026 · NIST NVD
Detected
HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system
Jun 17, 2026 · NIST NVD
Updated
HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system
Affected
- cpe hcl/aionversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2025-52648
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-52648
HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system
nvd.nist.gov