medium6.3
CVE-2026-35146
HCL DFXServer is affected by an Unencrypted Communication vulnerability.
Impact
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Dfx Server | through 2.5 |