Description
Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information
Published: 2026-10-19
Score: 7 High
EPSS: n/a
KEV: No
Impact: Sensitive Information Disclosure
Action: Apply Patch
AI Analysis

Impact

This vulnerability in Dell Application Store is caused by an incorrect assignment of permissions on a critical resource (CWE-732). An attacker who already has a low‑privileged account on the local system can exploit this flaw, enabling access to data that should be protected. The outcome is the disclosure of sensitive information that resides within the application store environment.

Affected Systems

Dell Application Store versions before 26.05.0.7 are affected. Systems running these releases are at risk; newer releases from version 26.05.0.7 onward contain the necessary fix.

Risk and Exploitability

The CVSS score of 7 indicates a moderate severity overall. EPSS is not provided, and the vulnerability is not listed in the CISA KEV catalog, suggesting no wide‑scale exploitation yet. Because the attack requires local, low‑privileged access, the threat is limited to users who can already access the system, but the resulting data exposure is significant.

Generated by OpenCVE AI on October 20, 2026 at 10:53 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Dell Application Store to version 26.05.0.7 or later.
  • Re‑configure or revoke any unnecessary privileges that local users have, so they cannot write or read the protected application store resources.
  • Audit and correct file and registry permissions on the application store components to enforce least‑privilege access.

Generated by OpenCVE AI on October 20, 2026 at 10:53 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Oct 2026 06:30:00 +0000

Type Values Removed Values Added
Title Local Permission Exploit in Dell Application Store Leading to Sensitive Data Disclosure

Tue, 20 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Title Local Permission Exploit in Dell Application Store Leading to Sensitive Data Disclosure

Mon, 19 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
Description Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information
Weaknesses CWE-732
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-10-19T19:41:05.089Z

Reserved: 2026-08-04T23:04:32.436Z

Link: CVE-2026-71169

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-19T20:20:03.053

Modified: 2026-10-19T20:51:14.800

Link: CVE-2026-71169

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T06:15:10Z

Weaknesses
  • CWE-732

    Incorrect Permission Assignment for Critical Resource