Dell vulnerabilities
Published CVEs affecting Dell products: 605 record(s), with severity, exploitation and fixes.
Secure Connect Gateway 107Secure Connect Gateway 5.0 - Appliance 104Secure Connect Gateway 5.0 - Application 103Data Domain Operating System 56Powerprotect Data Domain 49Policy Manager For Secure Connect Gateway 36Secure Connect Gateway SCG Policy Manager 36Powerscale Onefs 26OpenManage Server Administrator Managed Node for RHEL 9.4 23OpenManage Server Administrator Managed Node for RHEL 8.10 23Openmanage Server Administrator 23Powerflex Manager 23OpenManage Server Administrator Managed Node for SLES 15 23OpenManage Server Administrator Managed Node (Patch) for Windows 23Wyse Management Suite 22OpenManage Server Administrator Managed Node for Ubuntu 22.04 21Objectscale 20PowerStore 500T 18PowerStore 9000T 18PowerStore 1200T 18PowerStore 3200T 18PowerStore 3000T 18PowerStore 5200Q 18PowerStore 1000T 18PowerStore 5000T 18PowerStore 3200Q 18PowerStore 7000T 18PowerStore 5200T 18PowerStore 9200T 17Powerprotect Dp Series Appliance 17Powerprotect Data Manager 15ThinOS 10 15Powerstoreos 14Container Storage Modules 12Thinos 11Unisphere For Powermax 11Elastic Cloud Storage 11Dell Command Update (DCU) 11Command Update 11Display And Peripheral Manager 11
CVE-2026-54472
High · 7.5
CWE-798 Oct 6, 2026
Use of Hard-coded Credentials in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8
CVE-2026-76114
Medium · 5.9
CWE-319 Sep 29, 2026
Cleartext Transmission of Sensitive Information in Dell Policy Manager For Secure Connect Gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-73599
Medium · 5.4
CWE-601 Sep 29, 2026
Open Redirect in Dell Policy Manager For Secure Connect Gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
CVE-2026-73598
High · 7.8
CWE-732 Sep 29, 2026
Incorrect Permission Assignment for Critical Resource in Dell Policy Manager For Secure Connect Gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-73593
Medium · 6.7
CWE-489 Sep 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an...
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.
CVE-2026-73595
Critical · 9.8
CWE-494 Sep 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to...
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Information tampering, and Protection mechanism bypass.
CVE-2026-73594
High · 8.8
CWE-295 Sep 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to...
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.
CVE-2026-73597
High · 8.1
CWE-352 Sep 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross...
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, and Protection mechanism bypass.
CVE-2026-73596
Medium · 6.5
CWE-1188 Sep 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an...
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Information tampering, Protection mechanism bypass, and Unauthorized access.
CVE-2026-80359
Medium · 6.8
CWE-1191 Sep 28, 2026
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an…
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-80358
Medium · 5.1
CWE-1191 Sep 28, 2026
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an…
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-80357
High · 7.0
CWE-1191 Sep 28, 2026
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an…
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-70413
Medium · 5.6
CWE-259 Sep 28, 2026
Use of Hard-coded Password in Dell Live Optics Collector
Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-82164
High · 7.1
CWE-732 Sep 24, 2026
Incorrect Permission Assignment for Critical Resource in Dell Trusted Device Client,
Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-82157
High · 8.3
CWE-295 Sep 24, 2026
Improper Certificate Validation in Dell ThinOS 10
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Protection mechanism bypass and Unauthorized access.
CVE-2026-81473
High · 8.1
CWE-287 Sep 24, 2026
Improper Authentication in Dell Rugged Control Center (RCC)
Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-81455
High · 8.6
CWE-306 Sep 24, 2026
Missing Authentication for Critical Function in Dell ThinOS 10
Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-56792
Medium · 4.4
CWE-287 Sep 24, 2026
Improper Authentication in Dell Rugged Control Center (RCC)
Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-73591
High · 7.5
CWE-540 Sep 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-73589
Medium · 6.3
CWE-261 Sep 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.
CVE-2026-73588
High · 7.4
CWE-306 Sep 23, 2026
Missing Authentication for Critical Function in Dell Policy Manager For Secure Connect Gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-73587
Medium · 6.8
CWE-295 Sep 23, 2026
Improper Certificate Validation in Dell Policy Manager For Secure Connect Gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.
CVE-2026-73586
Medium · 6.4
CWE-613 Sep 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.
CVE-2026-71178
Low · 3.7
CWE-647 Sep 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains…
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-71177
Medium · 5.4
CWE-1021 Sep 23, 2026
Clickjacking in Dell Policy Manager For Secure Connect Gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session theft.