Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-35114 EUVD-2026-118245GHSA-hj2h-cxvv-5cgj

HCL AION is affected by multiple security vulnerabilities.

Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by HCL

Description

HCL AION is affected by a vulnerability where the X-Content-Type-Options header was missing or insecure, allowing browsers to MIME-sniff responses. This may cause content to be interpreted as an unintended type, potentially resulting in unintended behavior or security impact under certain conditions.

Affected products

VendorProductAffectedFixed
HCL Software HCL AION V 2.6.0 —

References