Dell Appsync vulnerabilities
6 CVEs affecting Dell Appsync, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-32657, published 2026-08-18.
More from Dell.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2025-32744, published 2025-07-21. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. Dell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this…
- CVE-2024-52542, published 2024-12-17. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to…
- CVE-2026-32657, published 2026-08-18. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager…
- CVE-2026-22767, published 2026-04-01. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading…
- CVE-2026-22768, published 2026-04-01. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this…
- CVE-2025-36603, published 2025-07-21. Medium severity, CVSS 4.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this…