Dell vulnerabilities

Published CVEs affecting Dell products: 606 record(s), with severity, exploitation and fixes.

Secure Connect Gateway 107 Secure Connect Gateway 5.0 - Appliance 104 Secure Connect Gateway 5.0 - Application 103 Data Domain Operating System 56 Powerprotect Data Domain 49 Policy Manager For Secure Connect Gateway 36 Secure Connect Gateway SCG Policy Manager 36 Powerscale Onefs 26 OpenManage Server Administrator Managed Node for RHEL 9.4 23 OpenManage Server Administrator Managed Node for RHEL 8.10 23 Openmanage Server Administrator 23 Powerflex Manager 23 OpenManage Server Administrator Managed Node for SLES 15 23 OpenManage Server Administrator Managed Node (Patch) for Windows 23 Wyse Management Suite 22 OpenManage Server Administrator Managed Node for Ubuntu 22.04 21 Objectscale 20 PowerStore 500T 18 PowerStore 9000T 18 PowerStore 1200T 18 PowerStore 3200T 18 PowerStore 3000T 18 PowerStore 5200Q 18 PowerStore 1000T 18 PowerStore 5000T 18 PowerStore 3200Q 18 PowerStore 7000T 18 PowerStore 5200T 18 PowerStore 9200T 17 Powerprotect Dp Series Appliance 17 Powerprotect Data Manager 15 ThinOS 10 15 Powerstoreos 14 Container Storage Modules 12 Thinos 11 Unisphere For Powermax 11 Elastic Cloud Storage 11 Dell Command Update (DCU) 11 Command Update 11 Display And Peripheral Manager 11

Exploited only (KEV) →

CVE-2026-79686 High · 8.8 CWE-693 Sep 1, 2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.

CVE-2026-79685 Medium · 6.5 CWE-88 Sep 1, 2026

Argument Injection in Dell Powerstoreos

Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.

CVE-2026-58569 High · 8.8 CWE-829 Sep 1, 2026

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere…

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..

CVE-2026-79684 High · 8.8 CWE-693 Sep 1, 2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

CVE-2026-58572 High · 8.8 CWE-94 Sep 1, 2026

Code Injection in Dell Powerstoreos

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.

CVE-2026-58571 High · 8.8 CWE-78 Sep 1, 2026

OS Command Injection in Dell Powerstoreos

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

CVE-2026-79683 High · 8.8 CWE-693 Sep 1, 2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths.

CVE-2026-58575 High · 8.8 CWE-290 Sep 1, 2026

Authentication Bypass by Spoofing in Dell Powerstoreos

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.

CVE-2026-76111 High · 8.8 CWE-863 Sep 1, 2026

Incorrect Authorization in Dell Powerstoreos

Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.

CVE-2026-58574 Critical · 9.8 CWE-306 Aug 31, 2026

Missing Authentication for Critical Function in Dell Powerstoreos

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

CVE-2026-79939 High · 7.8 CWE-61 Aug 26, 2026

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link…

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

CVE-2026-79938 High · 8.8 CWE-287 Aug 26, 2026

Improper Authentication in Dell Powerprotect Cyber Recovery

Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-74774 High · 7.5 CWE-295 Aug 26, 2026

Improper Certificate Validation in Dell Powerprotect One

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVE-2026-74771 Medium · 6.5 CWE-639 Aug 26, 2026

Authorization Bypass Through User-Controlled Key (IDOR) in Dell Powerprotect One

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

CVE-2026-74770 High · 8.8 CWE-78 Aug 26, 2026

OS Command Injection in Dell Powerprotect One

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

CVE-2026-71172 Medium · 4.3 CWE-918 Aug 26, 2026

Server-Side Request Forgery (SSRF) in Dell Cloud Disaster Recovery

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

CVE-2026-68863 High · 7.5 CWE-121 Aug 26, 2026

Stack-based Buffer Overflow in Dell Powerprotect One

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVE-2026-68861 High · 8.8 CWE-78 Aug 26, 2026

OS Command Injection in Dell Powerprotect One

CVE-2026-67275 Medium · 6.5 CWE-1357 Aug 26, 2026

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently…

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.

CVE-2026-49809 Medium · 6.5 CWE-89 Aug 26, 2026

SQL Injection in Dell Powerprotect Cyber Recovery

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-79940 Medium · 5.9 CWE-284 Aug 26, 2026

Improper Access Control in Dell iDRAC9

Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data.

CVE-2026-71171 High · 7.2 CWE-78 Aug 26, 2026

OS Command Injection in Dell Cloud Disaster Recovery

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-70419 Critical · 9.1 CWE-78 Aug 26, 2026

OS Command Injection in Dell Cloud Disaster Recovery

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-63693 Medium · 6.6 CWE-379 Aug 24, 2026

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link…

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write

CVE-2026-61419 High · 7.8 CWE-284 Aug 24, 2026

Improper Access Control in Dell Thinos

Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.