CVE-2026-35146

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.

CVSS 3.1

6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS

0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-25)

CWE

CWE-326

Published

2026-07-16

Modified

2026-10-24

Record from

the NVD, synced 2026-10-25

Affected

• hcltech:dfx_server

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131782

Check your stackJSON