High severity · published Aug 18, 2026
CVE-2026-32657
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell…
7.3
CVSS
0.2%
EPSS
No
On KEV
Description
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
AppSync · Dell
before 4.6.0.4 or later · source: vendor
MN
Metro Node · Dell
before 4.6.0.4 or later · source: vendor
PI
PowerFlex Intelligent Catalog · Dell
before 48.383.00 or later; before 48.378.00 or later · source: vendor
PM
PowerFlex Manager · Dell
before 4.5.5 or later · source: vendor
PR
PowerFlex Rack · Dell
before 4.5.5 or later · source: vendor
PO
PowerMax · Dell
before 10.3.1.0 Patch 11248 or later · source: vendor
UE
UCC Edge · Dell
before 3.0.2 or later · source: vendor
UN
Unity · Dell
before 5.5.2 or later · source: vendor
VX
VxRail · Dell
before 8.0.330 or later · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-32657
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-32657
www.dell.com
https://www.dell.com/support/kbdoc/en-us/000497857/dsa-2026-220-security-update-for-dell-product-vulnerability
More from AppSync
7.3
CVE-2026-22768
Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability
7.3
CVE-2026-22767
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability
6.6
CVE-2025-32744
Dell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability
5.5
CVE-2024-52542
Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability
4.8
CVE-2025-36603
Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability