What is CVE-2026-56454?

CVE-2026-56454 is a medium-severity vulnerability in Hcl Software Dfxanalytics, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.9/10. Published 2026-07-16.

How severe is CVE-2026-56454?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Hcl Software Dfxanalytics

CVE-2026-56454

HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws that expose data to interception and decryption. To remediate this risk, the application must disable all support for TLS 1.0 and TLS 1.1, and exclusively enable support for secure protocols, specifically TLS 1.2 and TLS 1.3.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.002 (12.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Hcl Software Dfxanalytics — versions version 3.0 and below
Hcltech Dfxanalytics

Weakness classification (CWE)

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm

References

psirt@hcl.com (Vendor Advisory)

Frequently asked questions

What is CVE-2026-56454?: CVE-2026-56454 is a medium-severity vulnerability in Hcl Software Dfxanalytics, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.9/10. Published 2026-07-16.
How severe is CVE-2026-56454?: Medium severity. CVSS v3 base score is 5.9 out of 10.