Dell vulnerabilities

Published CVEs affecting Dell products: 606 record(s), with severity, exploitation and fixes.

Secure Connect Gateway 107 Secure Connect Gateway 5.0 - Appliance 104 Secure Connect Gateway 5.0 - Application 103 Data Domain Operating System 56 Powerprotect Data Domain 49 Policy Manager For Secure Connect Gateway 36 Secure Connect Gateway SCG Policy Manager 36 Powerscale Onefs 26 OpenManage Server Administrator Managed Node for RHEL 9.4 23 OpenManage Server Administrator Managed Node for RHEL 8.10 23 Openmanage Server Administrator 23 Powerflex Manager 23 OpenManage Server Administrator Managed Node for SLES 15 23 OpenManage Server Administrator Managed Node (Patch) for Windows 23 Wyse Management Suite 22 OpenManage Server Administrator Managed Node for Ubuntu 22.04 21 Objectscale 20 PowerStore 500T 18 PowerStore 9000T 18 PowerStore 1200T 18 PowerStore 3200T 18 PowerStore 3000T 18 PowerStore 5200Q 18 PowerStore 1000T 18 PowerStore 5000T 18 PowerStore 3200Q 18 PowerStore 7000T 18 PowerStore 5200T 18 PowerStore 9200T 17 Powerprotect Dp Series Appliance 17 Powerprotect Data Manager 15 ThinOS 10 15 Powerstoreos 14 Container Storage Modules 12 Thinos 11 Unisphere For Powermax 11 Elastic Cloud Storage 11 Dell Command Update (DCU) 11 Command Update 11 Display And Peripheral Manager 11

Exploited only (KEV) →

CVE-2026-81478 Critical · 9.8 CWE-321 Sep 17, 2026

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of…

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-81477 High · 7.2 CWE-122 Sep 17, 2026

Heap-based Buffer Overflow in Dell Openmanage Server Administrator

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

CVE-2026-81474 High · 7.8 CWE-122 Sep 17, 2026

Heap-based Buffer Overflow in Dell Openmanage Server Administrator

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-81439 Medium · 6.5 CWE-863 Sep 17, 2026

Incorrect Authorization in Dell Openmanage Server Administrator

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVE-2026-81438 High · 7.5 CWE-327 Sep 17, 2026

Use of a Broken or Risky Cryptographic Algorithm in Dell Openmanage Server Administrator

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-66269 High · 7.5 CWE-470 Sep 17, 2026

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of…

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVE-2026-86359 High · 8.5 CWE-276 Sep 16, 2026

Incorrect Default Permissions in Dell Repository Manager

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-86358 High · 8.8 CWE-121 Sep 16, 2026

Stack-based Buffer Overflow in Dell Update Package Framework

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-71182 Medium · 6.0 CWE-59 Sep 16, 2026

Link Following in Dell Update Package Framework

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

CVE-2026-71181 Medium · 6.0 CWE-59 Sep 16, 2026

Link Following in Dell Update Package Framework

CVE-2026-71180 High · 7.8 CWE-252 Sep 16, 2026

Unchecked Return Value in Dell Update Package Framework

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-71179 High · 7.8 CWE-78 Sep 16, 2026

OS Command Injection in Dell Update Package Framework

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-76104 Medium · 5.5 CWE-732 Sep 16, 2026

Incorrect Permission Assignment for Critical Resource in Dell Objectscale

Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVE-2026-70416 Critical · 9.8 CWE-502 Sep 16, 2026

Deserialization of Untrusted Data in Dell Objectscale

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-26947 Medium · 6.7 CWE-269 Sep 16, 2026

Improper Privilege Management in Dell ECS

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2025-43936 Critical · 9.1 CWE-287 Sep 16, 2026

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication...

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2025-36591 Medium · 4.4 CWE-327 Sep 16, 2026

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0,...

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-81240 Critical · 9.8 CWE-434 Sep 15, 2026

Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-81239 Critical · 9.8 CWE-434 Sep 15, 2026

Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite

CVE-2026-81238 Critical · 9.1 CWE-306 Sep 15, 2026

Missing Authentication for Critical Function in Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-81237 Medium · 6.5 CWE-287 Sep 15, 2026

Improper Authentication in Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-81236 Critical · 9.8 CWE-434 Sep 15, 2026

Unrestricted Upload of File with Dangerous Type in Dell Wyse Management Suite

CVE-2026-81235 Medium · 4.9 CWE-325 Sep 15, 2026

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing…

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

CVE-2026-63696 Critical · 9.1 CWE-494 Sep 15, 2026

Download of Code Without Integrity Check in Dell SmartFabric OS10 Software

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

CVE-2026-63695 Critical · 9.8 CWE-284 Sep 15, 2026

Improper Access Control in Dell SmartFabric OS10 Software

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Session theft.