CVE-2026-56455

MEDIUM

HCL DFXAnalytics <= 3.0 - Buffer Overflow Denial of Service

Title source: manual
STIX 2.1

Description

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become unresponsive. To mitigate this flaw, comprehensive input length checks must be implemented and enforced on both the client and server sides.

Scores

CVSS v3 5.3
EPSS 0.0027
EPSS Percentile 18.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-121
Status published
Products (2)
HCL Software/DFXAnalytics version 3.0 and below
hcltech/dfxanalytics < 3.0
Published Jul 16, 2026
Tracked Since Jul 16, 2026