DSA-2026-255: Security Update for Cloudlink Multiple Vulnerabilities

Yhteenveto: Cloudlink remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Tämä artikkeli koskee tuotetta Tämä artikkeli ei koske tuotetta Tämä artikkeli ei liity tiettyyn tuotteeseen. Tässä artikkelissa ei yksilöidä kaikkia tuoteversioita.

Vaikutus

Medium

Tiedot

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2026-41118 Dell CloudLink, version(s) 8.2, contain(s) an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-46736 Dell CloudLink, version(s) CloudLink 8.1 and later versions, contain(s) a Missing Authorization vulnerability in the CloudLink Cluster. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and denial of service. 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2026-41118 Dell CloudLink, version(s) 8.2, contain(s) an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-46736 Dell CloudLink, version(s) CloudLink 8.1 and later versions, contain(s) a Missing Authorization vulnerability in the CloudLink Cluster. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and denial of service. 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies suosittelee, että kaikki asiakkaat ottavat huomioon sekä CVSS-peruspistemäärän että kaikki asiaankuuluvat väliaikaiset ja ympäristöön liittyvät pisteet, jotka voivat vaikuttaa tietyn tietoturvahaavoittuvuuden mahdolliseen vakavuuteen.

Tuotteet, joihin asia vaikuttaa, ja tilanteen korjaaminen

Product Affected Versions Remediated Versions Link
Cloudlink for PowerFlex Rack Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Rack Drivers & Downloads
Cloudlink for PowerFlex Appliance Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Appliance Drivers & Downloads
Cloudlink for PowerFlex Software Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Software Drivers & Downloads
Product Affected Versions Remediated Versions Link
Cloudlink for PowerFlex Rack Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Rack Drivers & Downloads
Cloudlink for PowerFlex Appliance Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Appliance Drivers & Downloads
Cloudlink for PowerFlex Software Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Software Drivers & Downloads

Versiohistoria

RevisionDateDescription
1.02026-06-18Initial release

Asiaan liittyvät tiedot

Tuotteet, joihin vaikutus kohdistuu

CloudLink
Artikkelin ominaisuudet
Artikkelin numero: 000477672
Artikkelin tyyppi: Dell Security Advisory
Viimeksi muutettu: 18 kesäk. 2026
Etsi vastauksia kysymyksiisi muilta Dell-käyttäjiltä
Tukipalvelut
Tarkista, kuuluuko laitteesi tukipalveluiden piiriin.