CVE-2026-58565: Missing Authorization

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-58564: Incorrect Default Permissions

Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-56797: Time-of-check Time-of-use (TOCTOU) Race Condition

Dell Command Update DCU, versions prior to 5.7.1, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56796: Improper Link Resolution Before File Access

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-53477: Time-of-check Time-of-use (TOCTOU) Race Condition

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49817: Deserialization of Untrusted Data

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49816: Deserialization of Untrusted Data

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

PT-2026-78479

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description An Improper Restriction of XML External Entity Reference exists, which allows a low privileged attacker with local access to potentially achieve elevation of privileges and Server-sid...

PT-2026-78478

Dell Command Update DCU, versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2026-78473

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description Missing authorization allows a low privileged attacker with local access to achieve elevation of privileges. Recommendations Update Dell Command Update DCU to version 5.7.1 or later...

PT-2026-78477

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description An Incorrect Authorization issue exists where a low privileged attacker with local access could potentially exploit the flaw to achieve Elevation of privileges. Recommendations Update...

PT-2026-78441

Name of the Vulnerable Software and Affected Versions Dell Command Update versions prior to 5.7.1 Description An issue involving the deserialization of untrusted data allows a low privileged attacker with local access to escalate their privileges to SYSTEM level. Deserialization is the process of...

PT-2026-78445

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description A Time-of-check Time-of-use TOCTOU Race Condition exists, which occurs when a program checks the state of a resource and then acts upon that resource, but the state changes between th...

PT-2026-78440

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description An issue exists involving the deserialization of untrusted data. A low privileged attacker with local access could exploit this to achieve elevation of privileges. Deserialization is...

CVE-2026-58562: Missing Authorization

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

PT-2026-78471

Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-67268: Improper Restriction of XML External Entity Reference

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery...

PT-2026-78444

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-67267: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Dell Command Update DCU, versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

OESA-2026-2879 freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fixes: ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI...