Encrypted Communication Vulnerability in HCL AION

CVE-2026-35110

What is CVE-2026-35110?

HCL AION exhibits a vulnerability that occurs due to the failure to enforce encrypted HTTPS communication for all requests. This oversight can lead to the transmission of sensitive data over unsecure connections, significantly increasing the risk of interception by malicious actors on the network. If exploited, the vulnerability could allow attackers to monitor data in transit, potentially causing unintended behavior and impacting security in various ways. Organizations using HCL AION should promptly assess and apply necessary mitigations to ensure secure communication practices.

References