CVE Watch18 oct 2026

CVE-2025-46424

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged

CVSS

6.7

Medio

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 5 nov 2025 · Última mod.: 18 oct 2026 · CWE-1240

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-09-232026-10-21

Descripción técnica

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service.

Referencias oficiales

www.dell.comhttps://www.dell.com/support/kbdoc/en-us/000384363/dsa-2025-374-security-update-for-dell-cloudlink-multiple-security-vulnerabilities

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-8374—

0.4%

——0Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.7d CVE-2026-217517.4 ALT

5.1%

——2HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached.10d CVE-2025-688335.3 MED

4.1%

——1HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources.23d CVE-2026-503035.5 MED

18.1%

——5Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.92d CVE-2026-46654—

2.5%

——1Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges, breaking the binding property of Fiat-Shamir. This issue has been patched in versions 0.4.3 and 0.5.3.91d CVE-2026-291467.5 ALT

86.8%

——26Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from 9.0.13 through 9..115, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Users are recommended to upgrade to version 11.0.19, 10.1.53 and 9.0.116, which fixes the issue.79d