CVE Intelligence

Dell vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dell products: 606 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-22767 High · 7.3 CWE-61 Apr 1, 2026
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following…
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-28265 High · 7.1 CWE-22 Apr 1, 2026
Path Traversal in Dell Powerstoreos
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
CVE-2026-27101 High · 7.2 CWE-22 Apr 1, 2026
Path Traversal in Dell Secure Connect Gateway
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-26948 Medium · 4.9 CWE-1258 Mar 18, 2026
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G…
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.
CVE-2026-26945 Medium · 5.3 CWE-114 Mar 18, 2026
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G…
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain a Process Control vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to code execution.
CVE-2026-23862 High · 7.8 CWE-77 Mar 16, 2026
Command Injection in Dell Thinos
Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24510 High · 7.8 CWE-269 Mar 11, 2026
Improper Privilege Management in Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24508 Medium · 5.5 CWE-295 Mar 11, 2026
Improper Certificate Validation in Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-24509 Medium · 5.5 CWE-284 Mar 11, 2026
Improper Access Control in Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-26034 High · 7.8 CWE-428 Mar 5, 2026
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect…
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL.
CVE-2026-26033 Medium · 6.7 CWE-428 Mar 5, 2026
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted…
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write access to a directory on the system drive to execute arbitrary code with SYSTEM privileges.
CVE-2026-26949 High · 7.8 CWE-863 Mar 4, 2026
Incorrect Authorization in Dell Device Management Agent
Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-22760 Medium · 5.5 CWE-754 Mar 4, 2026
Improper Check for Unusual or Exceptional Conditions in Dell Device Management Agent
Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Improper Check for Unusual or Exceptional Conditions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service.
CVE-2026-22285 Medium · 4.4 CWE-256 Mar 4, 2026
Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext…
Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized Access.
CVE-2026-25907 High · 7.5 CWE-645 Mar 4, 2026
Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout…
Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
CVE-2026-22270 Medium · 6.7 CWE-427 Mar 4, 2026
Uncontrolled Search Path Element in Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.
CVE-2026-21426 Medium · 6.7 CWE-250 Mar 4, 2026
Execution with Unnecessary Privileges in Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.
CVE-2026-21425 High · 7.8 CWE-266 Mar 4, 2026
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through…
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privilege assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-21424 Medium · 6.7 CWE-250 Mar 4, 2026
Execution with Unnecessary Privileges in Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-21423 Medium · 6.7 CWE-276 Mar 4, 2026
Incorrect Default Permissions in Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution, denial of service, elevation of privileges, and information disclosure.
CVE-2026-21422 Medium · 6.7 CWE-15 Mar 4, 2026
Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control…
Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-21421 Medium · 6.7 CWE-250 Mar 4, 2026
Execution with Unnecessary Privileges in Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2026-25906 High · 7.8 CWE-59 Mar 3, 2026
Link Following in Dell Optimizer
Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24502 High · 7.8 CWE-427 Mar 3, 2026
Uncontrolled Search Path Element in Dell Command | Intel Vpro Out Of Band
Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-23859 Low · 2.7 CWE-602 Feb 24, 2026
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement…
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to Protection mechanism bypass.