CVE-2026-35141

LOW

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability

Title source: cna
STIX 2.1

Description

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include timestamps with every message, ensuring that messages exceeding a specific age threshold are automatically rejected by the recipient system.

Scores

CVSS v3 2.6
EPSS 0.0019
EPSS Percentile 9.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-294
Status published
Products (2)
HCL Software/DFXAnalytics version 3.0 and below
hcltech/dfxanalytics < 3.0
Published Jul 16, 2026
Tracked Since Jul 16, 2026