CVE-2026-32657highCWE-61

CVE-2026-32657: high-severity vulnerability in Dell AppSync

Published · Updated

Follow this CVE+ Monitor Unity+ Monitor PowerFlex Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 0.2%
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell PowerFlex Manager Version 4.5.4, Dell PowerFlex Intelligent Catalog Versions 46.377.00 and 46.382.00 and Dell PowerFlex Rack version 4.5.4 and prior versions, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
Dell · AppSyncDell · Metro NodeDell · PowerFlex Intelligent CatalogDell · PowerFlex ManagerDell · PowerFlex RackDell · PowerMaxDell · UCC EdgeDell · UnityDell · VxRail
Related CVEs — Dell AppSync

In the same product, most dangerous first.

CVE-2022-24424HIGHCVE-2022-24424EPSS 1.7%CVE-2022-22553HIGHCVE-2022-22553EPSS 1.1%CVE-2022-22552MEDIUMCVE-2022-22552EPSS 0.7%CVE-2024-22464MEDIUMCVE-2024-22464EPSS 0.5%CVE-2025-32744MEDIUMCVE-2025-32744EPSS 0.5%CVE-2022-22551HIGHCVE-2022-22551EPSS 0.4%