CVE-2026-56797

Dell Command Update DCU, versions prior to 5.7.1, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56797

Dell Command Update (DCU) versions prior to 5.7.1 contain a TOCTOU race condition exploitable by a low-privileged local attacker, leading to elevation of privileges (CVSS 7.3 HIGH). No exploitation details are provided. Upgrade to DCU 5.7.1 or later as referenced in Dell DSA-2026-309.

EUVD-2026-62507

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49816

Dell Command Update (DCU) versions prior to 5.7.1 contain a Deserialization of Untrusted Data vulnerability. A low-privileged attacker with local access can exploit this to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7....

CVE-2026-49816

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49817

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-49817

Dell Command Update (DCU) versions prior to 5.7.1 are affected by a Deserialization of Untrusted Data vulnerability. A low-privileged local attacker can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). The at...

EUVD-2026-62503

Dell Command Update DCU, versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56796

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-56796

Dell Command Update versions prior to 5.7.1 contain a Link Following (CWE-59) vulnerability. A low-privileged local attacker can exploit it to achieve Elevation of Privileges. Dell's DSA-2026-309 advisory provides the fix. No in-the-wild exploitation has been reported. Upgrade to version 5.7.1. h...

EUVD-2026-62499

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-23501

Dell RecoverPoint for VMs versions 6.0.3 and 6.0.3.1 have an OS Command Injection flaw; a high-privileged remote attacker could execute arbitrary commands (CVSS 7.2 HIGH). Dell's DSA-2026-096 advisory provides remediation guidance at the linked support document.

EUVD-2026-62487

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-23501

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-62419

Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-32802

Dell PowerPath versions 7.2 through 8.0 SP1 contain an Improper Privilege Management flaw exploitable by a locally authenticated low-privilege attacker to gain elevated privileges (CVSS 5.3, medium). No exploitation or in-the-wild activity is documented. Apply Dell's DSA-2026-167 security update ...

CVE-2026-70423

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-70424

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-70422

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...

CVE-2026-70421

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...