CVE-2026-56454 identifies a deprecated protocol vulnerability in HCL Software's DFXAnalytics product due to the use of TLS 1.0 and TLS 1.1. These legacy TLS versions have cryptographic design flaws that compromise data confidentiality. The vulnerability is categorized under CWE-327, indicating the use of broken or risky cryptographic algorithms. The product is a cloud service, and the vendor manages remediation server-side. The CVSS 3.1 base score is 5.9 (medium severity), reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact.

The use of TLS 1.0 and TLS 1.1 in DFXAnalytics exposes transmitted data to potential interception and decryption due to known cryptographic weaknesses in these protocols. This compromises the confidentiality of data in transit. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.

Since DFXAnalytics is a cloud service, the vendor (HCL Software) manages remediation on the server side. Users should verify with HCL that support for TLS 1.0 and TLS 1.1 has been disabled and that only TLS 1.2 and TLS 1.3 are enabled. Patch status is confirmed as available, but no explicit patch links or advisories are provided. Check the vendor advisory for the latest remediation guidance.