CVE-2026-56796: CWE-59: Improper Link Resolution Before File Access ('Link Following') in Dell Dell Command Update (DCU)

CVE-2026-56796 describes an improper link resolution before file access vulnerability (CWE-59) in Dell Command Update (DCU) versions before 5.7.1. This vulnerability allows a local attacker with low privileges to exploit the way DCU resolves symbolic links or shortcuts before accessing files, potentially leading to elevation of privileges. The CVSS 3.1 base score is 6.6, reflecting a medium severity with local attack vector, low attack complexity, and no user interaction required. Confidentiality impact is low, integrity impact is high, and availability impact is low.

A low privileged attacker with local access could exploit this vulnerability to elevate their privileges, potentially gaining higher-level access than intended. This could lead to unauthorized modification of system files or settings, impacting system integrity. Confidentiality and availability impacts are limited but present.

Upgrade Dell Command Update to version 5.7.1 or later, where this vulnerability is fixed. Since the affected versions are prior to 5.7.1, applying the official update from Dell will remediate the issue. No additional vendor advisory or patch links were provided, but the version boundary clearly indicates the fix is in 5.7.1.