CVE-2026-71169
HighCVSS 7.0Summary
Dell Application Store versions prior to 26.05.0.7 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to disclosure of sensitive information.
Risk Assessment
A local low-privileged user could access sensitive information, potentially compromising data confidentiality. The risk applies to systems with the vulnerable Dell Application Store installed.
Recommendation
Update Dell Application Store to version 26.05.0.7 or later. Review and tighten permissions on critical resources and limit local access to necessary accounts.
Other vulnerabilities in Dell Application Store
See all- CVE-2026-82166High
Dell Application Store versions prior to 26.05.0.7 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.
- CVE-2026-71170High
Dell Application Store versions prior to 26.05.0.7 contain an Uncontrolled Path Element vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and arbitrary code execution.
Original NVD description (English source)
Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information
Vulnerability data from NVD (NIST) · CISA KEV · EPSS