CVE-2026-35142

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.

Score

CVSS 3.1 8.2 High

Status

Analyzed - psirt@hcl.com

Published

2026-07-16

Last modified

2026-10-24

Weaknesses

CWE-200

Affected products

• Dfxanalytics (Hcl Software)
• Dfxanalytics (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787