SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2026-71181

LOW · CVSS 3 EPSS 0.12% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-09-21

CyberRota Analysis

AI-Generated

Dell Update Package Framework versions prior to 26.07.03 are vulnerable to an improper link resolution issue, allowing a high-privileged attacker with local access to exploit the flaw. This could result in unauthorized filesystem access, potentially compromising sensitive data. Organizations using affected versions should prioritize remediation to mitigate the risk of local attacks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-71181
Severity
LOW
CVSS
3
EPSS
0.12%

Original NVD Description

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

Related CVEs

Other vulnerabilities affecting the same vendor(s)