Dell Command Update vulnerabilities

CVE-2026-67268 Medium · 6.5 CWE-611 Aug 19, 2026

XML External Entity (XXE) in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.

CVE-2026-67267 Medium · 5.5 CWE-497 Aug 19, 2026

Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive…

Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-67266 Medium · 5.5 CWE-863 Aug 19, 2026

Incorrect Authorization in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-58565 High · 8.8 CWE-862 Aug 19, 2026

Missing Authorization in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-58564 High · 7.8 CWE-276 Aug 19, 2026

Incorrect Default Permissions in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

CVE-2026-58562 High · 7.3 CWE-862 Aug 19, 2026

Missing Authorization in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-56797 High · 7.3 CWE-367 Aug 19, 2026

TOCTOU Race Condition in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-56796 Medium · 6.6 CWE-59 Aug 19, 2026

Link Following in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-53477 High · 7.8 CWE-367 Aug 19, 2026

TOCTOU Race Condition in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-49817 High · 7.8 CWE-502 Aug 19, 2026

Deserialization of Untrusted Data in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-49816 High · 7.8 CWE-502 Aug 19, 2026

Deserialization of Untrusted Data in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.