CVE-2025-52659
Low · 2.8CVSS
2.8
EPSS
0.2%
Published
Jan 19, 2026
CISA due date
—
The record
HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or information disclosure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-96369 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform… CWE-525
- CVE-2026-87940 Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key… CWE-525
- CVE-2026-13697 undici's cache interceptor mishandles malformed Cache-Control private directives. CWE-525
- CVE-2026-41918 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions <… CWE-525
- CVE-2026-41322 @astrojs/node allows Astro to deploy your SSR site to Node targets. CWE-525
- GHSA-c57f-mm3j-27q9 Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed CWE-525
- CVE-2025-15554 Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an… CWE-525
- CVE-2025-36364 IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can… CWE-525