Vulnerability · Published Jul 16, 2026 · Assigned by HCL

CVE-2026-35141HCL DFXAnalytics is affected by a Login Replay Attack vulnerability

Low 2.6

In plain English

A low-severity security flaw in DFXAnalytics from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)2.6Low

Exploit odds (30 days)0.3%top 73.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include timestamps with every message, ensuring that messages exceeding a specific age threshold are automatically rejected by the recipient system.

Affected products (as reported)

Vendor	Product	Versions
HCL Software	DFXAnalytics	version 3.0 and below

Weakness: CWE-294 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787