HCLSoftware DFXServer

• CVE-2025-59866 Low 3.3 The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to 0.1%
• CVE-2026-35146 Medium 6.3 HCL DFXServer is affected by an Unencrypted Communication vulnerability. 0.2%