CVE-2026-35148

6.3 Moyenne

Publiée le 16/07/2026 à 14:17 · Modifiée le 21/07/2026 à 22:16 · Analysée par le NVD · Source : psirt@hcl.com

Description

HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows any network user to invoke these APIs and interact with the application without verification of their identity or authorization level.

Traduire en français

Produits concernés

HCL Software DFXServer
Hcltech dfx server

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.3 Moyenne	psirt@hcl.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-284

Références

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131782 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories