PT-2026-60453 · Hcl · Dfxserver

CVE-2026-35147 · Published 2026-07-16 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL DFXServer (affected versions not specified)

Description Broken Authentication occurs via direct API access because the application fails to verify the authentication status of the user. This allows an unauthenticated attacker to interact with API endpoints and perform unauthorized actions without providing valid credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-35147

Affected Products

Dfxserver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-35147 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131782 · Note
• https://twitter.com/CVEnew/status/2077727709073932533 · Twitter Post