CVE-2026-41116

MediumCVSS 6.3

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

Dell Inventory Collector Client before version 13.8.0 contains an improper link resolution before file access ('Link Following') vulnerability. A low privileged attacker with local access can exploit this to achieve arbitrary file write.

Risk Assessment

An attacker can overwrite or create files in locations they normally cannot access, potentially leading to privilege escalation or system integrity compromise.

Recommendation

It is recommended to upgrade Dell Inventory Collector Client to version 13.8.0 or later, which includes a fix.

Other vulnerabilities in Dell Inventory Collector Client

CVE-2026-81469High
Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges.

Original NVD description (English source)

Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS