CVE-2026-35146 — HCL DFXServer is affected by an Unencrypted Communication vulnerability.

CVE-2026-35146

HCL DFXServer is affected by an Unencrypted Communication vulnerability. PUBLISHED

Description (CNA)

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / DFXServer	affected version 2.5 and below

CWE

CWE-326

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131782

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.