{"id":"CVE-2026-82166","kind":"vulnerability","aliases":["CVE-2026-82166"],"related":[],"title":"Dell Application Store: missing authentication lets nearby attackers run code","description":"Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.","summary":"Dell Application Store versions before 26.05.0.7 expose a critical function without requiring authentication. An unauthenticated attacker on the adjacent network can exploit it to execute arbitrary code.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","enterprise-endpoints","vendor","windows"],"not_affected_if":["not-installed","version-26.05.0.7-or-later"],"how_to_check":"Check the installed Dell Application Store version in the application's About dialog or installed programs list; versions below 26.05.0.7 are affected.","fix":"Update Dell Application Store to 26.05.0.7 or later.","status":"open","published_at":"2026-10-19T20:20:06+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-23T22:33:01+00:00","updated_at":"2026-10-23T22:33:01+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T22:33:01Z","model":"claude-haiku-5-5","output":{"fix":"Update Dell Application Store to 26.05.0.7 or later.","reach":"network","title":"Dell Application Store: missing authentication lets nearby attackers run code","impact":"high","summary":"Dell Application Store versions before 26.05.0.7 expose a critical function without requiring authentication. An unauthenticated attacker on the adjacent network can exploit it to execute arbitrary code.","category":"vendor","who_cares":["dell","windows","enterprise-endpoints"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the affected machine from the adjacent network.","analyst_note":"Confirm the affected critical function and the exact install/listening configuration at https://nvd.nist.gov/vuln/detail/CVE-2026-82166 and the Dell advisory it cites.","how_to_check":"Check the installed Dell Application Store version in the application's About dialog or installed programs list; versions below 26.05.0.7 are affected.","needs_analyst":true,"not_affected_if":["version-26.05.0.7-or-later","not-installed"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.0005,"input_tokens":2899,"output_tokens":420,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-82166':13A,16A '26.05.0.7':28B,56C 'access':71C 'adjac':41B,69C 'applic':2A,24B,51C 'arbitrari':48B,79C 'attack':8A,38B,67C 'authent':5A,35B,60C 'code':10A,49B,80C 'contain':57C 'could':72C 'critic':31B,62C 'cve':11A,14A 'dell':1A,17B,23B,50C 'endpoint':20B 'enterpris':19B 'enterprise-endpoint':18B 'execut':47B,81C 'exploit':44B,74C 'expos':29B 'function':32B,63C 'lead':77C 'let':6A 'miss':4A,59C 'nearbi':7A 'network':42B,70C 'potenti':73C 'prior':54C 'requir':34B 'run':9A 'store':3A,25B,52C 'unauthent':37B,66C 'vendor':21B 'version':26B,53C 'vulner':64C,76C 'window':22B 'without':33B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T20:20:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82166","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82166","severity":null,"published_at":"2026-10-19T20:20:06+00:00","modified_at":"2026-10-19T22:17:28+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}