What is CVE-2026-35146?

CVE-2026-35146 is a medium-severity vulnerability in Hclsoftware Dfxserver, classified under Inadequate Encryption Strength. CVSS score: 6.3/10. Published 2026-07-16.

How severe is CVE-2026-35146?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in Hclsoftware Dfxserver

CVE-2026-35146

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traff…

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L.

Affected products

Hclsoftware Dfxserver — versions version 2.5 and below

Weakness classification (CWE)

CWE-326 — Inadequate Encryption Strength

References

psirt@hcl.com

Frequently asked questions

What is CVE-2026-35146?: CVE-2026-35146 is a medium-severity vulnerability in Hclsoftware Dfxserver, classified under Inadequate Encryption Strength. CVSS score: 6.3/10. Published 2026-07-16.
How severe is CVE-2026-35146?: Medium severity. CVSS v3 base score is 6.3 out of 10.