DSA-2026-255: Security Update for Cloudlink Multiple Vulnerabilities

Riepilogo: Cloudlink remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.

Impatto

Medium

Dettagli

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2026-41118 Dell CloudLink, version(s) 8.2, contain(s) an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-46736 Dell CloudLink, version(s) CloudLink 8.1 and later versions, contain(s) a Missing Authorization vulnerability in the CloudLink Cluster. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and denial of service. 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2026-41118 Dell CloudLink, version(s) 8.2, contain(s) an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-46736 Dell CloudLink, version(s) CloudLink 8.1 and later versions, contain(s) a Missing Authorization vulnerability in the CloudLink Cluster. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and denial of service. 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies raccomanda a tutti i clienti di prendere in considerazione sia il punteggio base CVSS, sia ogni eventuale punteggio temporale o ambientale che possa avere effetti sul livello di gravità potenziale associato a una specifica vulnerabilità di sicurezza.

Prodotti interessati e correzione

Product Affected Versions Remediated Versions Link
Cloudlink for PowerFlex Rack Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Rack Drivers & Downloads
Cloudlink for PowerFlex Appliance Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Appliance Drivers & Downloads
Cloudlink for PowerFlex Software Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Software Drivers & Downloads
Product Affected Versions Remediated Versions Link
Cloudlink for PowerFlex Rack Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Rack Drivers & Downloads
Cloudlink for PowerFlex Appliance Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Appliance Drivers & Downloads
Cloudlink for PowerFlex Software Versions prior to 8.3.1 Version 8.3.1 or later PowerFlex Software Drivers & Downloads

Cronologia delle revisioni

RevisionDateDescription
1.02026-06-18Initial release

Informazioni correlate

Prodotti interessati

CloudLink
Proprietà dell'articolo
Numero articolo: 000477672
Tipo di articolo: Dell Security Advisory
Ultima modifica: 18 giu 2026
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.