CVE-2026-71169
CVSS v3
7
HIGH
EPSS Score
—
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Get an alert for each new CVE published for the software you run.
Affected and fixed versions
Neither OSV.dev nor the vendor advisories we read list affected versions for CVE-2026-71169 yet.
Description
Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information
Technical details
- CVSS v3 Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published
- 2026-10-19
- Last Modified
- 2026-10-19
Frequently asked questions
What is CVE-2026-71169?
Is CVE-2026-71169 actively exploited?
What is the CVSS score for CVE-2026-71169?
Hear about the next vulnerability in your software
CVE Watch matches each new CVE to the vendors and products you list (vendor and product, not the version) and puts it in your alerts with its KEV and EPSS status.
Already have an account? Open CVE WatchNo credit card required · No monthly cap on website lookups · 250 API requests/month
Go further
- Following what attackers exploit right now? The CISA KEV additions of the month, with their patch deadlines.
- Running this software? CVE Watch alerts you to new vulnerabilities in your products.
Related vulnerabilities
Same product first, then the same vendor advisory and the same publication week.
- CVE-2026-112082same weeksgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of service
- CVE-2026-112083same weeksgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service
- CVE-2026-112044same weekdotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication
- CVE-2026-111441same weekHLL 反序列化 lenTotal/lenUsed 校验缺失导致堆越界写
- CVE-2026-76740same weekHPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability
- CVE-2026-111438same weekcheck_hba_replication 认证与访问控制绕过
- CVE-2026-112034same weekaircheng-org iWebShop-5 Login Redirect _userInfo.php redirect
- CVE-2026-112081same weekhankcs HanLP Model Config Loading reflection.py hanlp.load deserialization