MEDIUMCVSS v3.1 5.4Vulnerability

CVE-2026-35110

HCL AION is affected by a vulnerability where encrypted (HTTPS) communication was not enforced for all requests. Data may be transmitted over unencrypted connections and intercepted by an attacker on the network, potentially resulting in unintended behavior or security impact under certain conditions.

Properties

Severity
MEDIUM
Nvd fetched at
2026-11-07T06:40:34.987550+00:00
Cvss severity
MEDIUM
Cvss score
5.4
Retrieved at
2026-11-07T06:41:39+00:00
Score
5.4
Cvss version
3.1
Last source
NVD
Cve id
CVE-2026-35110
Cvss vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
First seen by Signal
2026-11-06T14:20:47+00:00
Name
CVE-2026-35110
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
Published at
2026-11-06T14:17:12.630
Last modified
2026-11-06T21:30:44.667

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-35110 (CVSS v3.1 5.4) — Ninja Signal Threat Intelligence | Ninja Signal