CVE-2026-35146 PUBLISHED

HCL DFXServer is affected by an Unencrypted Communication vulnerability.

Assigner: HCL
Reserved: 01.04.2026 Published: 16.07.2026 Updated: 16.07.2026

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS Score: 6.3

Product Status

Vendor HCLSoftware
Product DFXServer
Versions Default: unaffected
  • Version version 2.5 and below is affected

References

Problem Types

  • CWE-326: Inadequate Encryption Strength CWE