{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3adellapplication_store/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:application_store:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7,"id":"CVE-2026-71169"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Application Store (\u003c 26.05.0.7)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","local-access","information-disclosure"],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell Application Store versions prior to 26.05.0.7 contain an incorrect permission assignment vulnerability categorized as a critical resource access issue. This flaw resides within the application’s local handling of resource permissions. A local attacker possessing low-level system privileges can exploit this vulnerability to bypass intended access controls, resulting in the disclosure of sensitive information stored by or accessible to the application. Given that the Dell Application Store is a component integrated into various Dell systems, this flaw poses a risk to internal environments where local user access is shared or where non-administrative users are granted interactive login rights. Defenders should prioritize updating the Dell Application Store to version 26.05.0.7 or later to mitigate unauthorized access to local sensitive data.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows local, low-privileged users to read sensitive information that should be restricted, potentially leading to the compromise of credentials, configuration data, or private user information contained within the application's environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the Dell Application Store to version 26.05.0.7 or later across all managed endpoints to resolve CVE-2026-71169.\u003c/li\u003e\n\u003cli\u003eAudit local file system permissions for directories associated with the Dell Application Store to ensure non-privileged users cannot access sensitive configuration files.\u003c/li\u003e\n\u003cli\u003eMonitor for unauthorized access attempts to local application data stores by low-privileged user accounts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-19T22:24:18Z","date_published":"2026-10-19T22:24:12Z","id":"https://feed.craftedsignal.io/briefs/2026-10-dell-app-store-permission-flaw/","summary":"An incorrect permission assignment vulnerability in the Dell Application Store allows a local low-privileged attacker to disclose sensitive information.","title":"Dell Application Store Incorrect Permission Assignment Vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-10-dell-app-store-permission-flaw/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:dell:application_store:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}