VYPR
Unrated severityNVD Advisory· Published Jul 17, 2026· Updated Jul 17, 2026

CVE-2025-59866

CVE-2025-59866

Description

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.

Affected products

3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.