Security Advisory

CVE-2025-59866

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-17 17:22:03
Last updated 2026-07-17 17:52:43
Assigner HCL
CVSS score 3.3
State PUBLISHED

Description

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.