CVE-2026-71182
LowCVSS 3.0Summary
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
Risk Assessment
Exploitation of this vulnerability may allow a highly privileged local attacker to gain unauthorized access to the filesystem, potentially leading to modification or theft of critical data. This can compromise system integrity and information confidentiality.
Recommendation
Update Dell Update Package Framework to version 26.07.03 or later, which removes this vulnerability. It is also advisable to restrict local access to trusted users and monitor for unusual file operations.
Other vulnerabilities in Dell Update Package Framework
See all- CVE-2026-86358Medium
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.
- CVE-2026-71181Low
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to filesystem access for the attacker.
- CVE-2026-71180High
Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
- CVE-2026-71179High
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Original NVD description (English source)
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.