CVE-2025-59866: Hclsoftware Dfmpro For Catia

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.

Affected products

Published 2026-07-17. Last modified 2026-09-29.