CVE-2026-35148mediumCWE-284

CVE-2026-35148: falha de média gravidade em HCL Software DFXServer

HCL DFXServer is affected by a Missing Access Control vulnerability

Publicada em

Seguir esta CVE+ Monitorar DFXServer

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.3%
HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows any network user to invoke these APIs and interact with the application without verification of their identity or authorization level.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
HCL Software · DFXServer
CVEs relacionadas — HCL Software DFXServer

No mesmo produto, das mais perigosas para as menos.

CVE-2026-35147HIGHHCL DFXServer is affected by a Broken Authentication vulnerability via direct API access.EPSS 0.4%CVE-2026-35149HIGHHCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.EPSS 0.4%