CVE Catalog

CVE-2026-56796

MediumCVSS 6.6
Published: Translated: NVD NIST

Summary

Dell Command Update (DCU) versions prior to 5.7.1 contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Risk Assessment

An attacker could exploit symbolic links to gain access to files or directories they should not have access to, potentially leading to privilege escalation.

Recommendation

Update Dell Command Update to version 5.7.1 or later, which includes fixes for the vulnerability. Restrict local access to the system for unauthorized users.

Original NVD description (English source)

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS