AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-21832

MEDIUM · CVSS 4.3 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

HCL AION is susceptible to an indirect prompt injection vulnerability that allows attackers to inject HTML into rendered output, potentially leading to unintended behavior or security risks for users. Organizations utilizing HCL AION should prioritize addressing this vulnerability to mitigate the risk of exploitation and protect user data.

CVE
CVE-2026-21832
Severity
MEDIUM
CVSS
4.3
EPSS
0.21%

Original NVD Description

HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to users, potentially resulting in unintended behavior or security impact under certain conditions.