Caching Vulnerability in HCL AION Affects Secure Page Responses

CVE-2026-35109

What is CVE-2026-35109?

HCL AION is susceptible to a vulnerability whereby pages served over HTTPS may be improperly cached by web browsers or intermediate proxies. This flaw poses a risk as unauthorized users with access to the cache can potentially retrieve sensitive data contained within cached responses. Under specific conditions, this unintended caching behavior could lead to significant security implications, making it crucial for users to implement appropriate security measures and updates to mitigate risks.

References