Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-32657

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell Po

Description

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell AppSync

Default version status: unaffected

  • 0 to < 4.6.0.4 or lateraffected

Dell Metro Node

Default version status: unaffected

  • 0 to < 4.6.0.4 or lateraffected

Dell UCC Edge

Default version status: unaffected

  • 0 to < 3.0.2 or lateraffected

Dell VxRail

Default version status: unaffected

  • 0 to < 8.0.330 or lateraffected

Dell PowerMax

Default version status: unaffected

  • 0 to < 10.3.1.0 Patch 11248 or lateraffected

Dell Unity

Default version status: unaffected

  • 0 to < 5.5.2 or lateraffected

Dell PowerFlex Manager

Default version status: unaffected

  • 0 to < 4.5.5 or lateraffected

Dell PowerFlex Intelligent Catalog

Default version status: unaffected

  • 0 to < 48.383.00 or lateraffected

Dell PowerFlex Intelligent Catalog

Default version status: unaffected

  • 0 to < 48.378.00 or lateraffected

Dell PowerFlex Rack

Default version status: unaffected

  • 0 to < 4.5.5 or lateraffected

References