CVE-2026-71182 is a vulnerability in Dell Update Package Framework
Published on September 16, 2026
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
Vulnerability Analysis
CVE-2026-71182 is exploitable with local system access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity and availability.
Weakness Type
What is an insecure temporary file Vulnerability?
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
CVE-2026-71182 has been classified to as an insecure temporary file vulnerability or weakness.
Products Associated with CVE-2026-71182
Want to know whenever a new CVE is published for Dell Update Package Framework? stack.watch will email you.
Affected Versions
Dell Update Package Framework:- Before 26.07.03 or later is affected.