1. Home
  2. CVE Database
  3. CVE-2026-35149
HIGH · 8.2

CVE-2026-35149

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering ...

Vulnerability Description

HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain unauthorized access to the application without verification.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
HcltechDfx Server<= 2.5

Related Weaknesses (CWE)

CWE-294

References

FAQ

What is CVE-2026-35149?

CVE-2026-35149 is a vulnerability with a CVSS score of 8.2 (HIGH). HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering ...

How severe is CVE-2026-35149?

CVE-2026-35149 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-35149?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Dfx Server.