CVE-2026-35149 — HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.

CVE-2026-35149

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. PUBLISHED

Description (CNA)

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the application without verification.

Affected (CNA)

Vendor / product	Versions
HCL Software / DFXServer	affected version 2.5 and below

CWE

CWE-294

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131782

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.