Improper Link Resolution Vulnerability in Dell Update Package Framework
CVE-2026-71181

3LOW

Key Information:

Vendor

Dell
Status
Update Package Framework
Vendor
CVE Published:
16 September 2026

What is CVE-2026-71181?

The Dell Update Package Framework prior to version 26.07.03 is susceptible to an improper link resolution vulnerability. This flaw allows a high privileged attacker with local access to exploit the system by potentially gaining filesystem access. It is crucial for users to update to the latest version to mitigate these risks.

Affected Version(s)

Update Package Framework 0 < 26.07.03 or later

References

https://www.dell.com/support/kbdoc/en-us/000509455/dsa-20...
vendor-advisory

CVSS V3.1

Score:
3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.