Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

10 records in Update Package Framework · all components

TI-2026-59118 CVE-2026-86358 · GHSA-4m5v-c85r-xxqw

Stack-based buffer overflow in Dell Update Package Framework

Priority MEDIUM 40

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00406 Published 2026-09-16 Fixed in 26.07.03 or later CWE-121
TI-2026-49864 CVE-2026-71179 · GHSA-jr4q-rwvq-9gqm

OS command injection in Dell Update Package Framework

Priority LOW 37

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0059 Published 2026-09-16 Fixed in 26.07.03 or later CWE-78
TI-2023-20404 CVE-2023-39254 · GHSA-mmxj-hfwh-mg82

Uncontrolled search path in Dell DUP Framework

Priority LOW 33

Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00171 Published 2024-03-01 Fixed in 4.9.10 CWE-427
TI-2023-15739 CVE-2023-32454 · GHSA-934w-fhc8-qwcj

Link following in Dell DUP Framework

Priority LOW 30

DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00168 Published 2024-02-06 No fix listed CWE-1386
TI-2019-02745 CVE-2019-3726 · GHSA-c3v3-2rrj-72gc

Uncontrolled search path in Dell EMC Servers: Networking and Fibre Channel Drivers: Dell…

Priority LOW 30

An Uncontrolled Search Path Vulnerability is applicable to the following: Dell Update Package (DUP) Framework file versions prior to 19.1.0.413, and Framework file versions prior to 103.4.6.69 used in Dell EMC Servers.

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00463 Published 2019-09-24 Fixed in 103.4.6.69, 19.1.0.413 +1 CWE-427
TI-2026-49867 CVE-2026-71182 · GHSA-7x3g-8cv9-44w3

Link following in Dell Update Package Framework

Priority LOW 26

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00148 Published 2026-09-16 Fixed in 26.07.03 or later CWE-59
TI-2026-49866 CVE-2026-71181 · GHSA-hgg4-pg78-3269

Link following in Dell Update Package Framework

Priority LOW 26

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00148 Published 2026-09-16 Fixed in 26.07.03 or later CWE-59
Open these records in search →