CVE-2025-46365

Medium · 6.7

CVSS

6.7

EPSS

0.4%

Published

Nov 5, 2025

CISA due date

—

The record

Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink.

Affected packages

Ecosystem	Package	Introduced	Fixed