Vulnerabilidades de Dell
CVEs publicadas que afetam produtos de Dell: 614 registro(s), com severidade, exploração e correções.
Secure Connect Gateway 107Secure Connect Gateway 5.0 - Appliance 104Secure Connect Gateway 5.0 - Application 103Data Domain Operating System 63Powerprotect Data Domain 49Policy Manager For Secure Connect Gateway 36Secure Connect Gateway SCG Policy Manager 36Powerscale Onefs 26OpenManage Server Administrator Managed Node for RHEL 9.4 23OpenManage Server Administrator Managed Node for RHEL 8.10 23Openmanage Server Administrator 23Powerflex Manager 23OpenManage Server Administrator Managed Node for SLES 15 23OpenManage Server Administrator Managed Node (Patch) for Windows 23Wyse Management Suite 22OpenManage Server Administrator Managed Node for Ubuntu 22.04 21Objectscale 20PowerStore 5200T 18PowerStore 500T 18PowerStore 3000T 18PowerStore 1000T 18PowerStore 7000T 18PowerStore 3200T 18PowerStore 3200Q 18PowerStore 1200T 18PowerStore 5200Q 18PowerStore 9000T 18PowerStore 5000T 18PowerStore 9200T 17Powerprotect Dp Series Appliance 17Powerprotect Data Manager 15ThinOS 10 15Powerstoreos 14Container Storage Modules 12Thinos 11Dell Command Update (DCU) 11Unisphere For Powermax 11Elastic Cloud Storage 11Command Update 11Display And Peripheral Manager 11
CVE-2026-22767
Alta · 7.3
CWE-61 01/04/2026
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following…
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-28265
Alta · 7.1
CWE-22 01/04/2026
Path Traversal em Dell Powerstoreos
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
CVE-2026-27101
Alta · 7.2
CWE-22 01/04/2026
Path Traversal em Dell Secure Connect Gateway
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-26948
Média · 4.9
CWE-1258 18/03/2026
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G…
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.
CVE-2026-26945
Média · 5.3
CWE-114 18/03/2026
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G…
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain a Process Control vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to code execution.
CVE-2026-23862
Alta · 7.8
CWE-77 16/03/2026
Command Injection em Dell Thinos
Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24510
Alta · 7.8
CWE-269 11/03/2026
Improper Privilege Management em Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24508
Média · 5.5
CWE-295 11/03/2026
Improper Certificate Validation em Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-24509
Média · 5.5
CWE-284 11/03/2026
Improper Access Control em Dell Alienware Command Center
Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-26034
Alta · 7.8
CWE-428 05/03/2026
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect…
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL.
CVE-2026-26033
Média · 6.7
CWE-428 05/03/2026
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted…
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write access to a directory on the system drive to execute arbitrary code with SYSTEM privileges.
CVE-2026-26949
Alta · 7.8
CWE-863 04/03/2026
Incorrect Authorization em Dell Device Management Agent
Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-22760
Média · 5.5
CWE-754 04/03/2026
Improper Check for Unusual or Exceptional Conditions em Dell Device Management Agent
Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Improper Check for Unusual or Exceptional Conditions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of Service.
CVE-2026-22285
Média · 4.4
CWE-256 04/03/2026
Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext…
Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized Access.
CVE-2026-25907
Alta · 7.5
CWE-645 04/03/2026
Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout…
Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
CVE-2026-22270
Média · 6.7
CWE-427 04/03/2026
Uncontrolled Search Path Element em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.
CVE-2026-21426
Média · 6.7
CWE-250 04/03/2026
Execution with Unnecessary Privileges em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.
CVE-2026-21425
Alta · 7.8
CWE-266 04/03/2026
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through…
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privilege assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-21424
Média · 6.7
CWE-250 04/03/2026
Execution with Unnecessary Privileges em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-21423
Média · 6.7
CWE-276 04/03/2026
Incorrect Default Permissions em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution, denial of service, elevation of privileges, and information disclosure.
CVE-2026-21422
Média · 6.7
CWE-15 04/03/2026
Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control…
Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-21421
Média · 6.7
CWE-250 04/03/2026
Execution with Unnecessary Privileges em Dell Powerscale Onefs
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2026-25906
Alta · 7.8
CWE-59 03/03/2026
Link Following em Dell Optimizer
Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-24502
Alta · 7.8
CWE-427 03/03/2026
Uncontrolled Search Path Element em Dell Command | Intel Vpro Out Of Band
Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-23859
Baixa · 2.7
CWE-602 24/02/2026
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement…
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to Protection mechanism bypass.