CVE-2026-71170
HighCVSS 7.8Summary
Dell Application Store versions prior to 26.05.0.7 contain an Uncontrolled Path Element vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and arbitrary code execution.
Risk Assessment
A local low-privileged user could elevate privileges and execute arbitrary code, potentially leading to system compromise. The risk applies to workstations and servers with the vulnerable Dell Application Store installed.
Recommendation
Update Dell Application Store to version 26.05.0.7 or later. Restrict local user privileges and monitor for unusual process activity.
Other vulnerabilities in Dell Application Store
See all- CVE-2026-82166High
Dell Application Store versions prior to 26.05.0.7 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.
- CVE-2026-71169High
Dell Application Store versions prior to 26.05.0.7 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to disclosure of sensitive information.
Original NVD description (English source)
Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS