CVE-2026-56454 HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1.

What is CVE-2026-56454?

CVE-2026-56454 is a medium-severity vulnerability in HCL Software DFXAnalytics, published on 16 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws that expose data to interception and decryption. To remediate this risk, the application must disable all support for TLS 1.0 and TLS 1.1, and exclusively enable support for secure protocols, specifically TLS 1.2 and TLS 1.3.

Weakness: CWE-327

Which versions are affected by CVE-2026-56454?

It affects 1 product.

Products include Hcltech Dfxanalytics.

How do I fix CVE-2026-56454?

No fix has been published for CVE-2026-56454 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-56454 being exploited?

There is no known exploitation of CVE-2026-56454 in the wild and no public exploit code.

Other vulnerabilities in HCL Software DFXAnalytics

• CVE-2026-56453 HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. Medium 5.5
• CVE-2026-56455 HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). Medium 5.3
• CVE-2026-56456 HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. Medium 5.3
• CVE-2025-31970 HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability Medium 5.3
• CVE-2025-59851 HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability Low 3.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4h8f-jwxw-9996.