CVE-2026-71170
7.8HighPublished 19 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-427
Impact
A local attacker with low-privileged system access can elevate privileges and execute arbitrary code. They need an existing local account on the host to exploit it.
Root cause
The application loads external components from an uncontrolled search path (CWE-427).
Affected systems
Dell Application Store versions prior to 26.05.0.7
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Dell Application Store to version 26.05.0.7 or later. No workaround or interim mitigation is documented, so restrict local user access if upgrading immediately is not possible.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution.