PT-2026-60455 · Hcl · Dfxserver

CVE-2026-35149 · Published 2026-07-16 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL DFXServer (affected versions not specified)

Description An authentication bypass exists due to server response manipulation. An unauthorized user can gain access to the application without valid credentials by intercepting and altering the responses sent by the server during the authentication process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2026-35149

Affected Products

Dfxserver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-35149 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131782 · Note
• https://twitter.com/CVEnew/status/2077727710596542663 · Twitter Post