LOW 3.7 NVD

CVE-2026-35115

HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security (HSTS) header was missing or insecurely configured, so browsers were not instru

HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security (HSTS) header was missing or insecurely configured, so browsers were not instructed to always use HTTPS. This may allow connections to be downgraded or intercepted, potentially resulting in unintended behavior or security impact under certain conditions.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118

Published: 2026-11-06 · Source: NVD · Feed updated: 2026-11-07

This low severity vulnerability with a CVSS score of 3.7 was published on 2026-11-06 via NVD.

vulnfeed aggregates 16326 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.