Live › vulnerability › CVE-2026-71170
Go to dashboardDell Application Store versions before 26.05.0.7 resolve a file path without restricting it, so a low-privileged local user can plant or redirect a file. This can lead to privilege escalation and arbitrary code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Dell Application Store before , most likely Dell-managed workstations where the store is installed. The sources do not describe the exact path or configuration needed, so the scope beyond version is unknown. Systems with the store already at or later are not affected.
26.05.0.726.05.0.7No product ranges from the sources yet.
26.05.0.726.05.0.7 or later, per Dell's advisory (source: NVD)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-71170")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.