Potential Security Risk in HCL AION Due to Missing Security Header

CVE-2026-35114

What is CVE-2026-35114?

HCL AION has a vulnerability stemming from the absence of a properly configured X-Content-Type-Options header. This omission allows web browsers to engage in MIME sniffing of responses, risking content interpretation as an unintended type. Under certain conditions, this could lead to unexpected behaviors or pose security risks. It is crucial for users to be aware and implement the recommended header to mitigate potential exploitation.

References