Skip to content
OpenAdvisories
High · 8.2 CVE-2026-35149 EUVD-2026-44907GHSA-8539-9p7j-q3gf

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.

Published Jul 16, 2026 · Updated Jul 16, 2026 · Assigned by HCL

Description

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the application without verification.

Affected products

VendorProductAffectedFixed
HCL Software DFXServer version 2.5 and below —

References