CVE-2026-82166
8.8HighPublished 19 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-306
Impact
Unauthenticated attackers on the adjacent network can achieve arbitrary code execution on systems running Dell Application Store. They only need local network access to exploit the unauthenticated critical functions.
Root cause
The application fails to require authentication for critical functions (CWE-306).
Affected systems
Dell Application Store versions prior to 26.05.0.7
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Dell Application Store to version 26.05.0.7 or later; if patching immediately is not possible, restrict adjacent network access to the application host.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.