CVE-2026-32657

State: Published
Severity: 7.3 High
Published: Aug 18, 2026
Updated: Aug 19, 2026
Reserved: Mar 12, 2026

Description

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	dell

Weaknesses

CWE-61 UNIX Symbolic Link (Symlink) Following

Affected Products

Product	Versions
AppSyncDell	before 4.6.0.4 or laterAffected
Metro NodeDell	before 4.6.0.4 or laterAffected
UCC EdgeDell	before 3.0.2 or laterAffected
VxRailDell	before 8.0.330 or laterAffected
PowerMaxDell	before 10.3.1.0 Patch 11248 or laterAffected
UnityDell	before 5.5.2 or laterAffected
PowerFlex ManagerDell	before 4.5.5 or laterAffected
PowerFlex Intelligent CatalogDell	before 48.383.00 or laterAffected
PowerFlex Intelligent CatalogDell	before 48.378.00 or laterAffected
PowerFlex RackDell	before 4.5.5 or laterAffected

References

https://www.dell.com/support/kbdoc/en-us/000497857/dsa-2026-220-security-update-for-dell-product-vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.