CVE Intelligence

Vulnerabilidades de Dell

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Dell: 614 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-22767 Alta · 7.3 CWE-61 01/04/2026
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following…
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-28265 Alta · 7.1 CWE-22 01/04/2026
Path Traversal em Dell Powerstoreos
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
CVE-2026-27101 Alta · 7.2 CWE-22 01/04/2026
Path Traversal em Dell Secure Connect Gateway
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-26948 Média · 4.9 CWE-1258 18/03/2026
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G…
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.
CVE-2026-26945 Média · 5.3 CWE-114 18/03/2026
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G…
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain a Process Control vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to code execution.
CVE-2026-23862 Alta · 7.8 CWE-77 16/03/2026
Command Injection em Dell Thinos
Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24510 Alta · 7.8 CWE-269 11/03/2026
Improper Privilege Management em Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24508 Média · 5.5 CWE-295 11/03/2026
Improper Certificate Validation em Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-24509 Média · 5.5 CWE-284 11/03/2026
Improper Access Control em Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-26034 Alta · 7.8 CWE-428 05/03/2026
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect…
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL.
CVE-2026-26033 Média · 6.7 CWE-428 05/03/2026
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted…
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write access to a directory on the system drive to execute arbitrary code with SYSTEM privileges.
CVE-2026-26949 Alta · 7.8 CWE-863 04/03/2026
Incorrect Authorization em Dell Device Management Agent
Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-22760 Média · 5.5 CWE-754 04/03/2026
Improper Check for Unusual or Exceptional Conditions em Dell Device Management Agent
Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Improper Check for Unusual or Exceptional Conditions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service.
CVE-2026-22285 Média · 4.4 CWE-256 04/03/2026
Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext…
Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized Access.
CVE-2026-25907 Alta · 7.5 CWE-645 04/03/2026
Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout…
Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
CVE-2026-22270 Média · 6.7 CWE-427 04/03/2026
Uncontrolled Search Path Element em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.
CVE-2026-21426 Média · 6.7 CWE-250 04/03/2026
Execution with Unnecessary Privileges em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.
CVE-2026-21425 Alta · 7.8 CWE-266 04/03/2026
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through…
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privilege assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-21424 Média · 6.7 CWE-250 04/03/2026
Execution with Unnecessary Privileges em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-21423 Média · 6.7 CWE-276 04/03/2026
Incorrect Default Permissions em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution, denial of service, elevation of privileges, and information disclosure.
CVE-2026-21422 Média · 6.7 CWE-15 04/03/2026
Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control…
Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-21421 Média · 6.7 CWE-250 04/03/2026
Execution with Unnecessary Privileges em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2026-25906 Alta · 7.8 CWE-59 03/03/2026
Link Following em Dell Optimizer
Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24502 Alta · 7.8 CWE-427 03/03/2026
Uncontrolled Search Path Element em Dell Command | Intel Vpro Out Of Band
Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-23859 Baixa · 2.7 CWE-602 24/02/2026
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement…
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to Protection mechanism bypass.