Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-35146 EUVD-2026-44905GHSA-g8m2-fxgf-6pqg

HCL DFXServer is affected by an Unencrypted Communication vulnerability.

Published Jul 16, 2026 · Updated Jul 16, 2026 · Assigned by HCL

Description

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.

Affected products

VendorProductAffectedFixed
HCLSoftware DFXServer version 2.5 and below —

References