Dell Application Store versions before 26.05.0.7 suffer from a missing authentication flaw that allows an unauthenticated attacker to exercise critical functions. This flaw, classified as CWE-306, can enable arbitrary code execution on the host running the store application.

The vulnerability applies to Dell Application Store when the installed version is older than 26.05.0.7. No other product versions are listed as affected.

The CVSS score of 8.8 indicates a high severity risk. Although the EPSS score is not available, the lack of listed KEV status suggests no publicly known exploitation yet. An attacker with adjacent network visibility can exploit the flaw by calling vulnerable endpoints without authentication, potentially gaining full control of the compromised system.