CVE-2026-25906 HIGH

CVE-2026-25906

Vendor Dell

Product Optimizer

Weakness CWE-59

Published March 3, 2026

Last update March 5, 2026

View on NVD All CVEs

CVSS base score

7.3/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Key dates

02Disclosure timeline

March 3, 2026 CVE published

March 5, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-25906 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/59.html

Related vulnerabilities

04Related CVE

CVE-2023-20004 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Write Vulnerability CVE-2025-5474 2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability CVE-2024-49051 Microsoft PC Manager Elevation of Privilege Vulnerability CVE-2025-8612 AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability CVE-2023-21760 Windows Print Spooler Elevation of Privilege Vulnerability