DSA-2026-165: Security Update for Dell AppSync Vulnerabilities.
Сводка: Dell AppSync remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Данная статья применяется к
Данная статья не применяется к
Эта статья не привязана к какому-либо конкретному продукту.
В этой статье указаны не все версии продуктов.
Влияние
High
Подробные сведения
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-27110 | Dell AppSync, version(s) 4.6.0.4, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access. | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2026-28257 | Dell AppSync, version(s) 4.6.0.4, contain(s) an Improper Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. | 7.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L |
| CVE-2026-28258 | Dell AppSync, version(s) 4.6.0.4, contain(s) an Improper Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. | 7.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-27110 | Dell AppSync, version(s) 4.6.0.4, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access. | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CVE-2026-28257 | Dell AppSync, version(s) 4.6.0.4, contain(s) an Improper Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. | 7.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L |
| CVE-2026-28258 | Dell AppSync, version(s) 4.6.0.4, contain(s) an Improper Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. | 7.6 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L |
Затронутые продукты и исправление
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
| CVE-2026-27110, CVE-2026-28257, CVE-2026-28258 | Dell AppSync | 4.6.0.4, 4.6.1.0 | 4.6.1.1 | https://www.dell.com/support/product-details/en-us/product/appsync/drivers |
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
| CVE-2026-27110, CVE-2026-28257, CVE-2026-28258 | Dell AppSync | 4.6.0.4, 4.6.1.0 | 4.6.1.1 | https://www.dell.com/support/product-details/en-us/product/appsync/drivers |
Временные решения и снижение риска
n/a
История изменений
|
Revision |
Date |
Description |
|
1.0 |
2026-08-24 |
Initial Release |
Сведения об авторе и авторских правах
Dell would like to thank brocked200 for reporting this issue.
Связанная информация
Правовая оговорка
Затронутые продукты
AppSyncСвойства статьи
Номер статьи: 000502484
Тип статьи: Dell Security Advisory
Последнее изменение: 24 Aug 2026
Получите ответы на свои вопросы от других пользователей Dell
Услуги технической поддержки
Проверьте, распространяются ли на ваше устройство услуги технической поддержки.