CVE-2025-46636

Medium · 6.6

CVSS

6.6

EPSS

0.1%

Published

Dec 9, 2025

CISA due date

—

The record

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Affected packages

Ecosystem	Package	Introduced	Fixed