Dell Inventory Collector Arbitrary File Write via Link Following (CVE-2026-41116)

Vulnerability Overview CVE ID: CVE-2026-41116 Vulnerability Name: Dell Inventory Collector Client File Access Vulnerability CVSS Base Score: 6.3 CVSS Vector String: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H Description: Dell Inventory Collector Client versions prior to 13.8.0 contain a "file access (symlink following)" vulnerability. A low-privilege attacker with local access may exploit this vulnerability to achieve arbitrary file writes. Scope of Impact Affected Product: Dell Inventory Collector Affected Versions: Versions prior to 13.8.0 Fixed Versions: Version 13.8.0 or later Remediation Automatic Update: Dell Command Manual Verification Steps: 1. Navigate to . 2. Right-click the file, select "Properties", and go to the "Details" tab. 3. Verify that the product version is 13.8.0 or later. - If yes, no further action is required. - If no, perform the following steps to automatically update Inventory Collector: - For SupportAssist for PCs (Home and Business): 1. Use Windows Search to find and select SupportAssist. 2. Open the SupportAssist application. 3. Navigate to "Get Drivers and Downloads" and click "Run Now". - For Dell Command 1. Use Windows Search to find and select Dell Command 2. Open the respective application (Dell Command 3. Click "Check for Updates". Additional Information Publication Date: 2026-06-08 Credit: Dell Technologies thanks falconCorrup for reporting this issue. Related Links: - Dell Security Advisories and Notices - Dell Vulnerability Response Policy - CVSS Scoring Guide Legal Disclaimer The information in this Dell Technologies Security Advisory should be read and used to help avoid situations that may arise from the issues described herein. Dell Technologies distributes Security Advisories to bring important security information to the attention of users of affected products. Dell Technologies assesses risk based on the average risk across a diverse collection of installed systems, which may not reflect the actual risk of your local installation and individual environment. All users are advised to determine the applicability of this information to their personal environment and take appropriate action. The information provided in this document is provided "as is" without warranty of any kind, either expressed or implied, including but not limited to warranties of merchantability and fitness for a particular purpose. Under no circumstances shall Dell Technologies, its affiliates, or suppliers be liable for any damages resulting from the use or inability to use the information in this document or actions you decide to take, even if Dell Technologies, its affiliates, or suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages, so the above limitation may not apply to you to the extent permitted by law. Affected Products Alienware Command Center Alienware Update Dell Command Dell Optimizer SupportAssist for Home PCs Dell Update SupportAssist for Business PCs Dell Trusted Device Provide Feedback Users can rate the article (accurate, helpful, easy to understand) and provide additional information. Footer Information Includes links for Dell Technologies account, support, contact us, community, partners, resources, etc.

Goal Reached Thanks to every supporter — we hit 100%!

Dell Inventory Collector Arbitrary File Write via Link Following (CVE-2026-41116)