Dell TechnologiesCVE-2026-71182

Dell Technologies Update Package Framework: link following

CVE-2026-71182 · Published Sep 16, 2026 · updated Sep 21, 2026

Low3.0

Fix: upgrade to 26.07.03 or later or later

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

Affected versions

Package	Affected	Fixed in
Update Package Framework Product	< 26.07.03 or later	26.07.03 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-59

More Dell Technologies advisories

All Dell Technologies

Medium 6.5Sep 16

Dell Technologies Update Package Framework: stack buffer overflowCVE-2026-86358fixed in 26.07.03 or later High 8.5Sep 16

Dell Technologies Repository Manager: insecure permissionsCVE-2026-86359fixed in 3.5.2 or later High 8.2Sep 16

Dell Update Package FrameworkCVE-2026-71180fixed in 26.07.03 or later Low 3.0Sep 16

Dell Technologies Update Package Framework: link followingCVE-2026-71181fixed in 26.07.03 or later High 7.3Sep 16

Dell Technologies Update Package Framework: command injectionCVE-2026-71179fixed in 26.07.03 or later Medium 5.5Sep 16

Dell Technologies ObjectScale: insecure permissionsCVE-2026-76104fixed in 4.4.0.0 or later