Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link Following’) vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Dell
  • Device Management Agent

No data.

No data.

References
Link Providers
https://www.dell.com/support/kbdoc/en-us/000473690/dsa-2026-258 cve-icon
History

Mon, 13 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution Leading to Privilege Escalation in Dell Device Management Agent

Sun, 12 Jul 2026 01:30:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution Leading to Privilege Escalation in Dell Device Management Agent

Sat, 11 Jul 2026 16:45:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Enables Privilege Escalation

Fri, 10 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Enables Privilege Escalation

Fri, 10 Jul 2026 03:30:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Prior to 26.05 Enables Privilege Escalation

Thu, 09 Jul 2026 06:30:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Prior to 26.05 Enables Privilege Escalation

Wed, 08 Jul 2026 18:15:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Could Lead to Privilege Escalation

Wed, 08 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Could Lead to Privilege Escalation

Tue, 07 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Title Improper Link Following in Dell Device Management Agent Allows Local Privilege Escalation

Tue, 07 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
Title Improper Link Following in Dell Device Management Agent Allows Local Privilege Escalation

Mon, 06 Jul 2026 11:45:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution Before File Access in Dell Device Management Agent Leading to Privilege Escalation

Sun, 05 Jul 2026 19:00:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution Before File Access in Dell Device Management Agent Leading to Privilege Escalation

Sun, 05 Jul 2026 03:15:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Enables Privilege Escalation

Sat, 04 Jul 2026 14:00:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Enables Privilege Escalation

Sat, 04 Jul 2026 03:00:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Allows Privilege Escalation

Fri, 03 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Allows Privilege Escalation

Fri, 03 Jul 2026 08:00:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Leading to Privilege Escalation

Thu, 02 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Leading to Privilege Escalation

Thu, 02 Jul 2026 16:00:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution Before File Access in Dell Device Management Agent Leading to Privilege Escalation

Thu, 02 Jul 2026 08:15:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution Before File Access in Dell Device Management Agent Leading to Privilege Escalation

Thu, 02 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Leading to Local Privilege Escalation

Thu, 02 Jul 2026 04:00:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell device Management Agent
Vendors & Products Dell
Dell device Management Agent

Wed, 01 Jul 2026 21:30:00 +0000

Type Values Removed Values Added
Title Improper Link Resolution in Dell Device Management Agent Leading to Local Privilege Escalation

Wed, 01 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 19:15:00 +0000

Type Values Removed Values Added
Description Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link Following’) vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Weaknesses CWE-59
References
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published: 2026-07-01T18:48:15.797Z

Updated: 2026-07-01T19:22:36.989Z

Reserved: 2026-04-17T05:04:42.886Z

Link: CVE-2026-41121

cve-icon Vulnrichment

Updated: 2026-07-01T19:22:27.293Z

cve-icon NVD

No data.

cve-icon Redhat

No data.