CVE-2026-35142 describes an information disclosure vulnerability in HCL Software's DFXAnalytics product. The application inadvertently includes internal IP addresses in its server responses, potentially revealing sensitive network topology details to unauthorized remote actors. This could facilitate further targeted attacks by mapping internal infrastructure. The vulnerability has a low CVSS score of 2.6, indicating limited impact. There is no available information on affected versions or remediation status at this time.

The vulnerability allows unauthorized remote attackers to obtain internal IP address information from server responses. While this does not directly compromise confidentiality, integrity, or availability, it may aid attackers in reconnaissance activities to plan further attacks. The CVSS vector indicates that exploitation requires high attack complexity, privileges, and user interaction, further limiting the risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider restricting access to the affected application to trusted users and networks to limit exposure of internal IP information.