Is CVE-2026-35146 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-35146?

CVE-2026-35146 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-35146

Description

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.