Vulnerabilidades de Dell

CVE-2026-71176 Alta · 8.8 CWE-89 19/08/2026

SQL Injection em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-67268 Média · 6.5 CWE-611 19/08/2026

XML External Entity (XXE) em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.

CVE-2026-67267 Média · 5.5 CWE-497 19/08/2026

Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive…

Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-67266 Média · 5.5 CWE-863 19/08/2026

Incorrect Authorization em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-58565 Alta · 8.8 CWE-862 19/08/2026

Missing Authorization em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-58564 Alta · 7.8 CWE-276 19/08/2026

Incorrect Default Permissions em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

CVE-2026-58562 Alta · 7.3 CWE-862 19/08/2026

Missing Authorization em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-56797 Alta · 7.3 CWE-367 19/08/2026

TOCTOU Race Condition em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-56796 Média · 6.6 CWE-59 19/08/2026

Link Following em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-54793 Média · 5.4 CWE-79 19/08/2026

Cross-site Scripting (XSS) em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-53477 Alta · 7.8 CWE-367 19/08/2026

TOCTOU Race Condition em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-49817 Alta · 7.8 CWE-502 19/08/2026

Deserialization of Untrusted Data em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-49816 Alta · 7.8 CWE-502 19/08/2026

Deserialization of Untrusted Data em Dell Command Update

Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-32802 Média · 5.3 CWE-269 19/08/2026

Improper Privilege Management em Dell PowerPath

Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-23501 Alta · 7.2 CWE-78 19/08/2026

OS Command Injection em Dell Recoverpoint For Virtual Machines

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-70424 Média · 6.5 CWE-22 19/08/2026

Path Traversal em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-70423 Média · 6.5 CWE-611 19/08/2026

XML External Entity (XXE) em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-70422 Alta · 8.8 CWE-89 19/08/2026

SQL Injection em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

CVE-2026-70421 Alta · 7.2 CWE-269 19/08/2026

Improper Privilege Management em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-56088 Alta · 8.8 CWE-89 19/08/2026

SQL Injection em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

CVE-2026-54796 Alta · 7.2 CWE-78 19/08/2026

OS Command Injection em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-54795 Alta · 8.8 CWE-78 19/08/2026

OS Command Injection em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-54794 Alta · 7.2 CWE-918 19/08/2026

Server-Side Request Forgery (SSRF) em Dell Openmanage Enterprise

Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-59915 Alta · 7.3 CWE-272 18/08/2026

Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least…

Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

CVE-2026-49500 Média · 6.0 CWE-272 18/08/2026

Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper…

Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service and Elevation of Privileges.