Broken Authentication in HCL DFXServer Affects User Security

CVE-2026-35147

What is CVE-2026-35147?

HCL DFXServer is susceptible to a Broken Authentication vulnerability that arises from inadequate user authentication checks on specific API endpoints. This flaw permits unauthorized users to access certain APIs, enabling them to execute actions without the need for valid credentials. Organizations utilizing HCL DFXServer must take immediate action to secure their systems against potential unauthorized access and ensure comprehensive authentication verification across all API interactions.

References