A vulnerability described as very critical has been identified in HCL DFXServer. Affected is an unknown function of the component APIs. Executing a manipulation can lead to improper access controls.

This vulnerability is registered as CVE-2026-35148. It is possible to launch the attack remotely. No exploit is available.