CVE-2026-35146CWE-326

HCL DFXServer is affected by an Unencrypted Communication vulnerability.

Medium · published July 16, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2026-07-16T11:01Z
EPSS history
Timeline
  • 16 JUL 11:01Z
    HCL DFXServer is affected by an Unencrypted Communication vulnerability.
    cvelistv5