CVE-2026-86360

Dell System Update , versions prior to 2.3.0.0 , is vulnerable to a path traversal flaw that allows unauthenticated remote attackers to gain filesystem access . This critical vulnerability can be leveraged to execute arbitrary code with root privileges , potentially leading to a complete compromi...

CVE-2021-21529

Dell DSU (Dell System Update) version 1.9 and earlier is affected by a local DoS vulnerability where a low-privileged, authenticated user can spawn multiple instances of the vulnerable DSU process, exhausting system memory. The issue is documented under CVE-2021-21529 with CVSS metrics indicating...

CVE-2022-34404

Summary (CVE-2022-34404) Dell System Update (versions 2.0.0 and earlier) contains an improper certificate validation flaw in the data parser module. The underlying issue is a certificate validation weakness that could enable a local attacker with high privileges to cause credential theft and/or d...

CVE-2026-86362

Dell System Update , versions prior to 2.3.0.0 , contains an Improper Access Control vulnerability (CWE-284). A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges . Documentation indicates that the manufacturer recommends updating to version 2.3.0.0...

CVE-2026-71168

Dell System Update (DSU) versions prior to 2.3.0.0 are vulnerable to an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Remote execution . The vulnerability is particularly r...

CVE-2026-63697

Dell System Update (DSU) versions prior to 2.3.0.0 are affected by an Improper Certificate Validation vulnerability (CWE-295). A high-privileged attacker with remote access could exploit this flaw to achieve Remote execution . The vulnerability specifically affects the DSU tool, which corporate a...

CVE-2026-86361

Dell System Update, versions prior to 2.3.0.0 , contains an Incorrect Permission Assignment for Critical Resource vulnerability (CWE-732 ). A low privileged attacker with local access could potentially exploit this flaw to achieve elevation of privileges . Dell recommends updating the software to...