Vulnerabilidades de Dell

CVEs publicadas que afetam produtos de Dell: 606 registro(s), com severidade, exploração e correções.

Secure Connect Gateway 107 Secure Connect Gateway 5.0 - Appliance 104 Secure Connect Gateway 5.0 - Application 103 Data Domain Operating System 56 Powerprotect Data Domain 49 Policy Manager For Secure Connect Gateway 36 Secure Connect Gateway SCG Policy Manager 36 Powerscale Onefs 26 OpenManage Server Administrator Managed Node for RHEL 9.4 23 OpenManage Server Administrator Managed Node for RHEL 8.10 23 Openmanage Server Administrator 23 Powerflex Manager 23 OpenManage Server Administrator Managed Node for SLES 15 23 OpenManage Server Administrator Managed Node (Patch) for Windows 23 Wyse Management Suite 22 OpenManage Server Administrator Managed Node for Ubuntu 22.04 21 Objectscale 20 PowerStore 500T 18 PowerStore 9000T 18 PowerStore 1200T 18 PowerStore 3200T 18 PowerStore 3000T 18 PowerStore 5200Q 18 PowerStore 1000T 18 PowerStore 5000T 18 PowerStore 3200Q 18 PowerStore 7000T 18 PowerStore 5200T 18 PowerStore 9200T 17 Powerprotect Dp Series Appliance 17 Powerprotect Data Manager 15 ThinOS 10 15 Powerstoreos 14 Container Storage Modules 12 Thinos 11 Unisphere For Powermax 11 Elastic Cloud Storage 11 Dell Command Update (DCU) 11 Command Update 11 Display And Peripheral Manager 11

Somente exploradas (KEV) →

CVE-2026-79686 Alta · 8.8 CWE-693 01/09/2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.

CVE-2026-79685 Média · 6.5 CWE-88 01/09/2026

Argument Injection em Dell Powerstoreos

Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.

CVE-2026-58569 Alta · 8.8 CWE-829 01/09/2026

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere…

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..

CVE-2026-79684 Alta · 8.8 CWE-693 01/09/2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

CVE-2026-58572 Alta · 8.8 CWE-94 01/09/2026

Code Injection em Dell Powerstoreos

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.

CVE-2026-58571 Alta · 8.8 CWE-78 01/09/2026

OS Command Injection em Dell Powerstoreos

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

CVE-2026-79683 Alta · 8.8 CWE-693 01/09/2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths.

CVE-2026-58575 Alta · 8.8 CWE-290 01/09/2026

Authentication Bypass by Spoofing em Dell Powerstoreos

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.

CVE-2026-76111 Alta · 8.8 CWE-863 01/09/2026

Incorrect Authorization em Dell Powerstoreos

Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.

CVE-2026-58574 Crítica · 9.8 CWE-306 31/08/2026

Missing Authentication for Critical Function em Dell Powerstoreos

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

CVE-2026-79939 Alta · 7.8 CWE-61 26/08/2026

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link…

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

CVE-2026-79938 Alta · 8.8 CWE-287 26/08/2026

Improper Authentication em Dell Powerprotect Cyber Recovery

Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-74774 Alta · 7.5 CWE-295 26/08/2026

Improper Certificate Validation em Dell Powerprotect One

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVE-2026-74771 Média · 6.5 CWE-639 26/08/2026

Authorization Bypass Through User-Controlled Key (IDOR) em Dell Powerprotect One

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

CVE-2026-74770 Alta · 8.8 CWE-78 26/08/2026

OS Command Injection em Dell Powerprotect One

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

CVE-2026-71172 Média · 4.3 CWE-918 26/08/2026

Server-Side Request Forgery (SSRF) em Dell Cloud Disaster Recovery

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

CVE-2026-68863 Alta · 7.5 CWE-121 26/08/2026

Stack-based Buffer Overflow em Dell Powerprotect One

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVE-2026-68861 Alta · 8.8 CWE-78 26/08/2026

OS Command Injection em Dell Powerprotect One

CVE-2026-67275 Média · 6.5 CWE-1357 26/08/2026

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently…

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.

CVE-2026-49809 Média · 6.5 CWE-89 26/08/2026

SQL Injection em Dell Powerprotect Cyber Recovery

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-79940 Média · 5.9 CWE-284 26/08/2026

Improper Access Control em Dell iDRAC9

Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data.

CVE-2026-71171 Alta · 7.2 CWE-78 26/08/2026

OS Command Injection em Dell Cloud Disaster Recovery

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-70419 Crítica · 9.1 CWE-78 26/08/2026

OS Command Injection em Dell Cloud Disaster Recovery

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-63693 Média · 6.6 CWE-379 24/08/2026

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link…

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write

CVE-2026-61419 Alta · 7.8 CWE-284 24/08/2026

Improper Access Control em Dell Thinos

Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.