CVE-2026-35149CWE-294

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.

High · published July 16, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the application without verification.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00416 · 34.9th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2026-07-16T11:03Z
EPSS history
Timeline
  • 16 JUL 11:03Z
    HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.
    cvelistv5