CVE-2026-28262 is an improper link resolution before file access vulnerability in Dell iDRAC Tools. This flaw allows a low privileged attacker with local access to exploit symbolic link following, potentially leading to information tampering. The vulnerability affects versions prior to 11.4.1.0. The CVSS 3.1 vector indicates the attack requires local access, high attack complexity, low privileges, and user interaction, resulting in no confidentiality impact but high integrity and availability impacts.

An attacker with low privileges and local access could exploit this vulnerability to tamper with information on the affected system. There is no confidentiality impact reported, but integrity and availability impacts are high, meaning the attacker could modify or disrupt data or system operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Dell's advisories for updates. Until a patch is available, restrict local access to trusted users and consider additional controls to prevent exploitation of symbolic link vulnerabilities.