Dell vulnerabilities

CVE-2026-71176 High · 8.8 CWE-89 Aug 19, 2026

SQL Injection in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-67268 Medium · 6.5 CWE-611 Aug 19, 2026

XML External Entity (XXE) in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.

CVE-2026-67267 Medium · 5.5 CWE-497 Aug 19, 2026

Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive…

Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-67266 Medium · 5.5 CWE-863 Aug 19, 2026

Incorrect Authorization in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-58565 High · 8.8 CWE-862 Aug 19, 2026

Missing Authorization in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-58564 High · 7.8 CWE-276 Aug 19, 2026

Incorrect Default Permissions in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

CVE-2026-58562 High · 7.3 CWE-862 Aug 19, 2026

Missing Authorization in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-56797 High · 7.3 CWE-367 Aug 19, 2026

TOCTOU Race Condition in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-56796 Medium · 6.6 CWE-59 Aug 19, 2026

Link Following in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-54793 Medium · 5.4 CWE-79 Aug 19, 2026

Cross-site Scripting (XSS) in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-53477 High · 7.8 CWE-367 Aug 19, 2026

TOCTOU Race Condition in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-49817 High · 7.8 CWE-502 Aug 19, 2026

Deserialization of Untrusted Data in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-49816 High · 7.8 CWE-502 Aug 19, 2026

Deserialization of Untrusted Data in Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-32802 Medium · 5.3 CWE-269 Aug 19, 2026

Improper Privilege Management in Dell PowerPath

Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-23501 High · 7.2 CWE-78 Aug 19, 2026

OS Command Injection in Dell Recoverpoint For Virtual Machines

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-70424 Medium · 6.5 CWE-22 Aug 19, 2026

Path Traversal in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-70423 Medium · 6.5 CWE-611 Aug 19, 2026

XML External Entity (XXE) in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-70422 High · 8.8 CWE-89 Aug 19, 2026

SQL Injection in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

CVE-2026-70421 High · 7.2 CWE-269 Aug 19, 2026

Improper Privilege Management in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-56088 High · 8.8 CWE-89 Aug 19, 2026

SQL Injection in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

CVE-2026-54796 High · 7.2 CWE-78 Aug 19, 2026

OS Command Injection in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-54795 High · 8.8 CWE-78 Aug 19, 2026

OS Command Injection in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-54794 High · 7.2 CWE-918 Aug 19, 2026

Server-Side Request Forgery (SSRF) in Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-59915 High · 7.3 CWE-272 Aug 18, 2026

Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least…

Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-49500 Medium · 6.0 CWE-272 Aug 18, 2026

Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper…

Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service and Elevation of Privileges.