Description
Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information
Published: 2026-10-19
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: Sensitive Information Disclosure
Action: Apply Patch
AI Analysis

Impact

This vulnerability in Dell Application Store is caused by an incorrect assignment of permissions on a critical resource (CWE-732). An attacker who already has a low‑privileged account on the local system can exploit this flaw, enabling access to data that should be protected. The outcome is the disclosure of sensitive information that resides within the application store environment.

Affected Systems

Dell Application Store versions before 26.05.0.7 are affected. Systems running these releases are at risk; newer releases from version 26.05.0.7 onward contain the necessary fix.

Risk and Exploitability

The CVSS score of 7 indicates a moderate severity overall. EPSS is not provided, and the vulnerability is not listed in the CISA KEV catalog, suggesting no wide‑scale exploitation yet. Because the attack requires local, low‑privileged access, the threat is limited to users who can already access the system, but the resulting data exposure is significant.

Generated by OpenCVE AI on October 20, 2026 at 10:53 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Dell Application Store to version 26.05.0.7 or later.
  • Re‑configure or revoke any unnecessary privileges that local users have, so they cannot write or read the protected application store resources.
  • Audit and correct file and registry permissions on the application store components to enforce least‑privilege access.

Generated by OpenCVE AI on October 20, 2026 at 10:53 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell application Store
Vendors & Products Dell
Dell application Store

Tue, 20 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 06:30:00 +0000

Type Values Removed Values Added
Title Local Permission Exploit in Dell Application Store Leading to Sensitive Data Disclosure

Tue, 20 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
Title Local Permission Exploit in Dell Application Store Leading to Sensitive Data Disclosure

Mon, 19 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
Description Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information
Weaknesses CWE-732
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Dell Application Store
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-10-20T16:09:41.284Z

Reserved: 2026-08-04T23:04:32.436Z

Link: CVE-2026-71169

cve-icon Vulnrichment

Updated: 2026-10-20T15:16:14.831Z

cve-icon NVD

Status : Deferred

Published: 2026-10-19T20:20:03.053

Modified: 2026-10-20T17:17:41.250

Link: CVE-2026-71169

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T16:47:39Z

Weaknesses
  • CWE-732

    Incorrect Permission Assignment for Critical Resource