vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-32657

HIGH
7.3
CVSS Score
Published: August 18, 2026 at 05:50 PM UTC
Updated: August 20, 2026 at 01:15 PM UTC
9 products affected across 2 vendorsUnity Operating EnvironmentPowerFlex ManagerAppsync

Using AppSync by Dell?

Get instant alerts when new vulnerabilities affect AppSync - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.3
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Metro Node· Dell
60%
v < 4.6.0.4 or later
Affected range stops below 4.6.0.4 or later, so it looks safe — our inference, not a vendor statement
PowerFlex Intelligent Catalog· Dell
60%
v < 48.378.00 or laterv < 48.383.00 or later
Affected range stops below 48.378.00 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 48.383.00 or later, so it looks safe — our inference, not a vendor statement
PowerFlex Manager· Dell
60%
v < 4.5.5 or later
Affected range stops below 4.5.5 or later, so it looks safe — our inference, not a vendor statement
PowerFlex rack· Dell
60%
v < 4.5.5 or later
Affected range stops below 4.5.5 or later, so it looks safe — our inference, not a vendor statement
PowerMax· Dell
60%
v < 10.3.1.0 Patch 11248 or later
Affected range stops below 10.3.1.0 Patch 11248 or later, so it looks safe — our inference, not a vendor statement
UCC Edge· Dell
60%
v < 3.0.2 or later
Affected range stops below 3.0.2 or later, so it looks safe — our inference, not a vendor statement
Unity Operating Environment· Dell
60%
v < 5.5.2 or later
Affected range stops below 5.5.2 or later, so it looks safe — our inference, not a vendor statement
VxRail· Dell
60%
v < 8.0.330 or later
Affected range stops below 8.0.330 or later, so it looks safe — our inference, not a vendor statement
Appsync· EMC
60%
v < 4.6.0.4 or later
Affected range stops below 4.6.0.4 or later, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: cverecord
https://www.dell.com/support/kbdoc/en-us/000497857/dsa-2026-220-security-update-for-dell-product-vulnerability

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.3HIGHdell
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusAWAITING ANALYSIS
CWE
CWE-61

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card