CVE-2026-35142 HCL Software CVE debrief

Who should care

Users of HCL DFXAnalytics, operators, platform administrators, vulnerability management teams, and security teams should be aware of this Internal IP Address Disclosure vulnerability, as it could allow a remote attacker to gather sensitive network topology information.

Technical summary

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks. The vulnerability has a CVSS score of 2.6 and a severity of LOW. Users of HCL DFXAnalytics should be aware of this vulnerability and take necessary precautions to prevent exploitation.

Defensive priority

Low priority, as the vulnerability has a low CVSS score and requires high privileges to exploit. However, users should still take necessary precautions to prevent exploitation.

Recommended defensive actions

• Review and update HCL DFXAnalytics to ensure internal IP address details are not included in server responses.
• Implement network segmentation and access controls to limit the attack surface.
• Monitor for suspicious activity and implement incident response plans.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further investigation and verification are necessary to fully understand the impact and scope of the vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information. Users should verify the affected product deployments and review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Official resources