CVE-2026-32657
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Multiple Dell products (AppSync, Metro Node, UCC Edge, VxRail, PowerMax, Unity, PowerFlex Manager, PowerFlex Intelligent Catalog, PowerFlex Rack) contain a UNIX Symbolic Link Following vulnerability. A low privileged attacker with local access could exploit this vulnerability to escalate privileges.
Risk Assessment
The organization is exposed to privilege escalation, which could allow an attacker to gain higher privileges on the system and access sensitive data or resources.
Recommendation
It is recommended to apply patches provided by Dell for the listed products and restrict local access to systems.
Original NVD description (English source)
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.