CVE-2026-71169
7.0HighPublished 19 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-732
Impact
A low-privileged local attacker can access and disclose sensitive information on the host. They need local account access to the machine running the application.
Root cause
Incorrect permission assignment on a critical resource allows unauthorized local read access.
Affected systems
Dell Application Store versions prior to 26.05.0.7
CVSS v3.1 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Dell Application Store to version 26.05.0.7 or later. No workaround or interim mitigation is listed in the advisory.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information