CVE-2026-35109
LOW
INFO
Priority: 0.01
BB Relevance:
57/100
Published: 2026-11-06
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
Network
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
Unchanged
C:
Low
I:
None
A:
None
Description
HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies. Sensitive information in cached responses may be retrieved by an unauthorized user with access to the cache, potentially resulting in unintended behavior or security impact under certain conditions.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| HCL Software | HCL AION | V 2.6.0 |
| HCL Software | HCL AION | V 2.6.0 |