Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-35149

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.

Description

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the application without verification.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software DFXServer

Default version status: unaffected

  • version 2.5 and belowaffected

References