Security Advisory

CVE-2026-35147

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-16 11:04:00

Last updated 2026-07-16 11:56:23

Assigner HCL

CVSS score 8.2

State PUBLISHED

Description

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without valid credentials.

← Browse all CVEs View on cve.org ↗