CVE-2026-56454 MEDIUM

CVE-2026-56454: HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1.

Vendor Hcl Software

Product DFXAnalytics

Weakness CWE-327 · Broken crypto

Published July 16, 2026

Last update July 16, 2026

View on NVD All CVEs

CVSS base score

5.9/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws that expose data to interception and decryption. To remediate this risk, the application must disable all support for TLS 1.0 and TLS 1.1, and exclusively enable support for secure protocols, specifically TLS 1.2 and TLS 1.3.

Key dates

02Disclosure timeline

July 16, 2026 CVE published

July 16, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-56454 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/327.html AskarLabs — CWE-327 write-up Use of a Broken or Risky Cryptographic Algorithm

Related vulnerabilities

CVE-2026-56454: HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1.

01Description

02Disclosure timeline

03References

04Related CVE