CVE-2025-46365 MEDIUM

CVE-2025-46365

Vendor Dell

Product CloudLink

Weakness CWE-77

Published November 5, 2025

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Local

Attack complexity High

Privileges required High

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

What the vulnerability does

01Description

Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink.

Key dates

02Disclosure timeline

November 5, 2025 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-46365 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/77.html