What is the CVSS score of CVE-2026-22767?

CVE-2026-22767 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dell are affected by CVE-2026-22767?

Dell AppSync 4.6.0 contains a privilege escalation vulnerability that allows authenticated local users to manipulate system files through symbolic link exploitation, potentially compromising data…. A patch is available.

How to fix or mitigate CVE-2026-22767?

Within 24 hours: Inventory all Dell AppSync 4.6.0 deployments and identify affected systems. Within 7 days: Apply vendor-released patch to AppSync; verify patch deployment across all instances. Within 30 days: Conduct access review for local AppSync user accounts and implement principle of least privilege restrictions; monitor file system activity for symbolic link anomalies.

Dell CVE-2026-22767

EUVD-2026-17871 HIGH

UNIX Symbolic Link (Symlink) Following (CWE-61)

2026-04-01 dell

Dell Information Disclosure

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:09 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

4.6.1.0

EUVD ID Assigned

Apr 01, 2026 - 13:00 euvd

EUVD-2026-17871

Analysis Generated

Apr 01, 2026 - 13:00 vuln.today

CVE Published

Apr 01, 2026 - 12:07 nvd

HIGH 7.3

DescriptionCVE.org

Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

AnalysisAI

UNIX symbolic link following in Dell AppSync 4.6.0 allows local authenticated attackers with low privileges to tamper with information and potentially escalate impact to high integrity and availability compromise. CVSS 7.3 (High) with low attack complexity. No public exploit identified at time of analysis. EPSS data not available, but local-only access requirement significantly reduces real-world attack surface compared to remotely exploitable vulnerabilities.

Technical ContextAI

This vulnerability (CWE-61: UNIX Symbolic Link Following) occurs when Dell AppSync 4.6.0 improperly validates symbolic links during file operations. When a privileged process follows a symlink created by a low-privileged user, it can be tricked into operating on unintended files or directories with the elevated privileges of the process. This is a classic time-of-check-time-of-use (TOCTOU) race condition where an attacker creates a symlink pointing to a sensitive target file between the time the application checks the path and when it actually uses it. The affected product per CPE data is Dell AppSync application suite version 4.6.0. The CWE-61 class represents improper link resolution vulnerabilities common in UNIX-based systems where symbolic links can redirect file operations to attacker-controlled locations, enabling privilege escalation or unauthorized file access/modification.

RemediationAI

Vendor-released patch available per Dell Security Advisory DSA-2026-163. Administrators should immediately upgrade Dell AppSync from version 4.6.0 to the patched version specified in the advisory at https://www.dell.com/support/kbdoc/en-us/000446965/dsa-2026-163-security-update-for-dell-appsync-vulnerabilities. As an interim mitigation while planning the upgrade, organizations can reduce risk by restricting local system access to trusted administrators only, implementing file system monitoring for suspicious symlink creation in AppSync directories, and applying principle of least privilege to limit the number of users with local authentication capabilities on systems running AppSync. Review and harden file permissions on AppSync installation directories to prevent low-privileged users from creating symbolic links in sensitive paths. The patch should be prioritized in the next maintenance window, particularly for systems with multiple local users or where AppSync processes run with elevated privileges.