PatchSiren cyber security CVE debrief

CVE-2026-44275 Dell CVE debrief

CVE-2026-44275 is a MEDIUM severity vulnerability in Dell/Alienware Purchased Apps versions prior to 1.1.32.0. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write. The vulnerability is caused by an Improper Link Resolution Before File Access ('Link Following').

Vendor: Dell
Product: Dell/Alienware Purchased Apps
CVSS: MEDIUM 6.3
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-09
Original CVE updated: 2026-06-09
Advisory published: 2026-06-09
Advisory updated: 2026-06-09

Who should care

Users of Dell/Alienware Purchased Apps versions prior to 1.1.32.0

Technical summary

The vulnerability is caused by an Improper Link Resolution Before File Access ('Link Following') in Dell/Alienware Purchased Apps versions prior to 1.1.32.0. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write.

Defensive priority

MEDIUM

Recommended defensive actions

Update Dell/Alienware Purchased Apps to version 1.1.32.0 or later
Restrict local access to sensitive areas of the system

Evidence notes

The CVE-2026-44275 vulnerability was published on [cvePublishedAt] and modified on [cveModifiedAt]. The vulnerability has a CVSS score of 6.3 and a severity of MEDIUM.

Official resources

CVE-2026-44275 was published on [cvePublishedAt] and modified on [cveModifiedAt].