1. Home
  2. CVE Database
  3. CVE-2026-35148
MEDIUM · 6.3

CVE-2026-35148

HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows ...

Vulnerability Description

HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows any network user to invoke these APIs and interact with the application without verification of their identity or authorization level.

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
HcltechDfx Server<= 2.5

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2026-35148?

CVE-2026-35148 is a vulnerability with a CVSS score of 6.3 (MEDIUM). HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows ...

How severe is CVE-2026-35148?

CVE-2026-35148 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-35148?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Dfx Server.