CVE-2025-52631: Hcltech Aion

High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. This can allow insecure connections, potentially exposing the application to man-in-the-middle and protocol downgrade attacks.. This issue affects AION: 2.0.

Affected products

• Hcltech Aion: version 2.0.0 only

Published 2026-02-03. Last modified 2026-06-17.