CVE-2026-35146: Hcltech Dfx Server

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.

Affected products

• Hcltech Dfx Server: up to and including 2.5

Published 2026-07-16. Last modified 2026-07-21.