CVE-2026-35146: HCL DFXServer is affected by an Unencrypted Communication vulnerability.
Published Jul 16, 2026
·Updated
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.
Affected Software
2 affected components
HCL DFXServer
hcltech Dfx Server<=2.5
Event History
Jul 16, 2026
CVE Published
via MITRE·11:01 AM
Data Sourced
via MITRE·11:01 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-35146?
The severity of CVE-2026-35146 is medium with a score of 6.3.
2
What type of vulnerability is identified in CVE-2026-35146?
CVE-2026-35146 is an Unencrypted Communication vulnerability affecting HCL DFXServer.
3
How does CVE-2026-35146 potentially impact users?
CVE-2026-35146 allows remote attackers to intercept unencrypted network traffic and expose sensitive data.
4
How can I mitigate the risks associated with CVE-2026-35146?
Mitigation for CVE-2026-35146 involves implementing encrypted communication channels to secure data transmission.
5
Which software is affected by CVE-2026-35146?
CVE-2026-35146 affects the HCL DFXServer software.