CVE Intelligence

Dell vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dell products: 606 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-71177 Medium · 5.4 CWE-1021 Sep 23, 2026
Clickjacking in Dell Policy Manager For Secure Connect Gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session theft.
CVE-2026-61413 Medium · 6.8 CWE-269 Sep 23, 2026
Improper Privilege Management in Dell Policy Manager For Secure Connect Gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-81469 High · 7.8 CWE-428 Sep 21, 2026
Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search…
Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges
CVE-2026-49811 High · 8.4 CWE-732 Sep 21, 2026
Incorrect Permission Assignment for Critical Resource in Dell Command Monitor (DCM)
Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-82165 Medium · 5.5 CWE-276 Sep 21, 2026
Incorrect Default Permissions in Dell Command | Integration Suite for System Center
Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
CVE-2026-82163 Medium · 5.5 CWE-276 Sep 21, 2026
Incorrect Default Permissions in Dell Command | Intel Vpro Out Of Band
Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
CVE-2026-49810 High · 7.8 CWE-532 Sep 21, 2026
Insertion of Sensitive Information into Log File in Dell Command Powershell Provider (DCPP)
Dell Command Powershell Provider (DCPP), versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
CVE-2026-56795 High · 8.2 CWE-427 Sep 17, 2026
Uncontrolled Search Path Element in Dell Driver Pack For Windows OS
Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
CVE-2026-81447 Medium · 6.8 CWE-295 Sep 17, 2026
Improper Certificate Validation in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.
CVE-2026-81446 High · 7.4 CWE-918 Sep 17, 2026
Server-Side Request Forgery (SSRF) in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
CVE-2026-81445 High · 7.2 CWE-269 Sep 17, 2026
Improper Privilege Management in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-80356 High · 7.3 CWE-200 Sep 17, 2026
Exposure of Sensitive Information in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-54471 Medium · 6.5 CWE-280 Sep 17, 2026
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of…
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-26950 High · 8.8 CWE-345 Sep 17, 2026
Insufficient Verification of Data Authenticity in Dell Smartfabric Manager
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-81453 Medium · 6.5 CWE-22 Sep 17, 2026
Path Traversal in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
CVE-2026-81443 Medium · 6.4 CWE-918 Sep 17, 2026
Server-Side Request Forgery (SSRF) in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
CVE-2026-81442 High · 8.1 CWE-269 Sep 17, 2026
Improper Privilege Management in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.
CVE-2026-80355 Medium · 5.4 CWE-352 Sep 17, 2026
Cross-Site Request Forgery (CSRF) in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-81481 High · 7.5 CWE-22 Sep 17, 2026
Path Traversal in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
CVE-2026-81480 High · 7.2 CWE-121 Sep 17, 2026
Stack-based Buffer Overflow in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
CVE-2026-81479 Medium · 5.5 CWE-187 Sep 17, 2026
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial…
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Partial String Comparison vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-81476 Critical · 9.8 CWE-78 Sep 17, 2026
OS Command Injection in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-81475 Critical · 9.8 CWE-306 Sep 17, 2026
Missing Authentication for Critical Function in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-81441 Medium · 5.5 CWE-306 Sep 17, 2026
Missing Authentication for Critical Function in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-81440 Critical · 9.8 CWE-798 Sep 17, 2026
Use of Hard-coded Credentials in Dell Openmanage Server Administrator
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.