CVE-2026-32657: Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity…

PriorityP339high7.3CVSS 3.1

AVLACLPRLUIRSUCHIHAH

EPSS

0.17%

6.0th percentile

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
dell	appsync	< 4.6.0.4 or later	4.6.0.4 or later
dell	metro_node	< 4.6.0.4 or later	4.6.0.4 or later
dell	powerflex_intelligent_catalog	< 48.383.00 or later	48.383.00 or later
dell	powerflex_intelligent_catalog	< 48.378.00 or later	48.378.00 or later
dell	powerflex_manager	< 4.5.5 or later	4.5.5 or later
dell	powerflex_rack	< 4.5.5 or later	4.5.5 or later
dell	powermax	< 10.3.1.0 Patch 11248 or later	10.3.1.0 Patch 11248 or later
dell	ucc_edge	< 3.0.2 or later	3.0.2 or later
dell	unity	< 5.5.2 or later	5.5.2 or later
dell	vxrail	< 8.0.330 or later	8.0.330 or later

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.