CVE-2026-82166
HighCVSS 8.8Summary
Dell Application Store versions prior to 26.05.0.7 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.
Risk Assessment
An attacker on an adjacent network could achieve arbitrary code execution without authentication, potentially leading to full system compromise. The risk applies to environments where Dell Application Store is reachable from the local network.
Recommendation
Update Dell Application Store to version 26.05.0.7 or later. Restrict network access to the service and segment the network to hinder adjacent-network attacks.
Other vulnerabilities in Dell Application Store
See all- CVE-2026-71170High
Dell Application Store versions prior to 26.05.0.7 contain an Uncontrolled Path Element vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and arbitrary code execution.
- CVE-2026-71169High
Dell Application Store versions prior to 26.05.0.7 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to disclosure of sensitive information.
Original NVD description (English source)
Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS