Vulnerabilidades de Dell

CVEs publicadas que afetam produtos de Dell: 605 registro(s), com severidade, exploração e correções.

Secure Connect Gateway 107 Secure Connect Gateway 5.0 - Appliance 104 Secure Connect Gateway 5.0 - Application 103 Data Domain Operating System 56 Powerprotect Data Domain 49 Policy Manager For Secure Connect Gateway 36 Secure Connect Gateway SCG Policy Manager 36 Powerscale Onefs 26 OpenManage Server Administrator Managed Node for RHEL 9.4 23 OpenManage Server Administrator Managed Node for RHEL 8.10 23 Openmanage Server Administrator 23 Powerflex Manager 23 OpenManage Server Administrator Managed Node for SLES 15 23 OpenManage Server Administrator Managed Node (Patch) for Windows 23 Wyse Management Suite 22 OpenManage Server Administrator Managed Node for Ubuntu 22.04 21 Objectscale 20 PowerStore 500T 18 PowerStore 9000T 18 PowerStore 1200T 18 PowerStore 3200T 18 PowerStore 3000T 18 PowerStore 5200Q 18 PowerStore 1000T 18 PowerStore 5000T 18 PowerStore 3200Q 18 PowerStore 7000T 18 PowerStore 5200T 18 PowerStore 9200T 17 Powerprotect Dp Series Appliance 17 Powerprotect Data Manager 15 ThinOS 10 15 Powerstoreos 14 Container Storage Modules 12 Thinos 11 Unisphere For Powermax 11 Elastic Cloud Storage 11 Dell Command Update (DCU) 11 Command Update 11 Display And Peripheral Manager 11

Somente exploradas (KEV) →

CVE-2026-81477 Alta · 7.2 CWE-122 17/09/2026

Heap-based Buffer Overflow em Dell Openmanage Server Administrator

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

CVE-2026-81474 Alta · 7.8 CWE-122 17/09/2026

Heap-based Buffer Overflow em Dell Openmanage Server Administrator

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-81439 Média · 6.5 CWE-863 17/09/2026

Incorrect Authorization em Dell Openmanage Server Administrator

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVE-2026-81438 Alta · 7.5 CWE-327 17/09/2026

Use of a Broken or Risky Cryptographic Algorithm em Dell Openmanage Server Administrator

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-66269 Alta · 7.5 CWE-470 17/09/2026

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of…

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVE-2026-86359 Alta · 8.5 CWE-276 16/09/2026

Incorrect Default Permissions em Dell Repository Manager

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-86358 Alta · 8.8 CWE-121 16/09/2026

Stack-based Buffer Overflow em Dell Update Package Framework

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-71182 Média · 6.0 CWE-59 16/09/2026

Link Following em Dell Update Package Framework

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

CVE-2026-71181 Média · 6.0 CWE-59 16/09/2026

Link Following em Dell Update Package Framework

CVE-2026-71180 Alta · 7.8 CWE-252 16/09/2026

Unchecked Return Value em Dell Update Package Framework

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-71179 Alta · 7.8 CWE-78 16/09/2026

OS Command Injection em Dell Update Package Framework

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-76104 Média · 5.5 CWE-732 16/09/2026

Incorrect Permission Assignment for Critical Resource em Dell Objectscale

Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVE-2026-70416 Crítica · 9.8 CWE-502 16/09/2026

Deserialization of Untrusted Data em Dell Objectscale

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-26947 Média · 6.7 CWE-269 16/09/2026

Improper Privilege Management em Dell ECS

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2025-43936 Crítica · 9.1 CWE-287 16/09/2026

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication...

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2025-36591 Média · 4.4 CWE-327 16/09/2026

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0,...

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

CVE-2026-81240 Crítica · 9.8 CWE-434 15/09/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVE-2026-81239 Crítica · 9.8 CWE-434 15/09/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

CVE-2026-81238 Crítica · 9.1 CWE-306 15/09/2026

Missing Authentication for Critical Function em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-81237 Média · 6.5 CWE-287 15/09/2026

Improper Authentication em Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-81236 Crítica · 9.8 CWE-434 15/09/2026

Unrestricted Upload of File with Dangerous Type em Dell Wyse Management Suite

CVE-2026-81235 Média · 4.9 CWE-325 15/09/2026

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing…

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

CVE-2026-63696 Crítica · 9.1 CWE-494 15/09/2026

Download of Code Without Integrity Check em Dell SmartFabric OS10 Software

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

CVE-2026-63695 Crítica · 9.8 CWE-284 15/09/2026

Improper Access Control em Dell SmartFabric OS10 Software

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Session theft.

CVE-2026-81468 Alta · 7.2 CWE-78 10/09/2026

OS Command Injection em Dell Thinos

Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.