CVE-2026-35147: HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access.
Published Jul 16, 2026
·Updated
HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without valid credentials.
Affected Software
2 affected components
HCL DFXServer
hcltech Dfx Server<=2.5
Event History
Jul 16, 2026
CVE Published
via MITRE·11:04 AM
Data Sourced
via MITRE·11:04 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-35147?
The severity of CVE-2026-35147 is high with a score of 8.2.
2
How do I fix CVE-2026-35147?
To fix CVE-2026-35147, ensure proper authentication checks are implemented for API access.
3
What type of vulnerability is CVE-2026-35147?
CVE-2026-35147 is categorized as a Broken Authentication vulnerability.
4
Which software is affected by CVE-2026-35147?
CVE-2026-35147 affects HCL DFXServer.
5
What attack vector is utilized in CVE-2026-35147?
CVE-2026-35147 allows an unauthenticated attacker to exploit direct API access.