Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-35109 EUVD-2026-118238GHSA-gxqc-c9h2-825x

HCL AION is affected by multiple security vulnerabilities.

Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by HCL

Description

HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies. Sensitive information in cached responses may be retrieved by an unauthorized user with access to the cache, potentially resulting in unintended behavior or security impact under certain conditions.

Affected products

VendorProductAffectedFixed
HCL Software HCL AION V 2.6.0 —

References