CVE-2026-35146
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
63/100
Published: 2026-07-16
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
Required
S:
Unchanged
C:
Low
I:
Low
A:
Low
Description
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| hcltech | dfx_server | < 2.5 |
References & Advisories (1)
Vendor Advisory