CVE-2026-35141CWE-294

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability

Low · published July 16, 2026

CVSS v3.1
2.6
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include timestamps with every message, ensuring that messages exceeding a specific age threshold are automatically rejected by the recipient system.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2026-07-16T12:59Z
EPSS history
Timeline
  • 16 JUL 12:59Z
    HCL DFXAnalytics is affected by a Login Replay Attack vulnerability
    cvelistv5