[ Vendor · 84 CVEs ]
Dell
CVEs affecting Dell published in the last 30 days, plus any Dell CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-82166 | 19 Oct 2026 | CVSS 8.8 | Dell Application StoreDell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated… | |
| CVE-2026-71169 | 19 Oct 2026 | CVSS 7.0 | Dell Application StoreDell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged… | |
| CVE-2026-71170 | 19 Oct 2026 | CVSS 7.8 | Dell Application StoreDell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access… | |
| CVE-2026-86375 | 19 Oct 2026 | CVSS 6.2 | Dell Application Installer,Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker… | |
| CVE-2026-81452 | 16 Oct 2026 | CVSS 7.0 | Dell Alienware Command Center (AWCC)Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with… | |
| CVE-2026-82153 | 14 Oct 2026 | CVSS 2.2 | Dell OS Recovery ToolDell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with… | |
| CVE-2026-91883 | 14 Oct 2026 | CVSS 4.3 | Dell Terraform Provider for OMEDell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the… | |
| CVE-2026-91881 | 14 Oct 2026 | CVSS 9.0 | Dell Terraform Provider for RedfishDell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport… | |
| CVE-2026-91882 | 14 Oct 2026 | CVSS 8.6 | Dell Terraform Provider for OMEDell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or… | |
| CVE-2026-76113 | 14 Oct 2026 | CVSS 4.3 | Dell Terraform Provider for RedfishDell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor… | |
| CVE-2026-94348 | 14 Oct 2026 | CVSS 6.1 | Dell PowerScale InsightIQDell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL… | |
| CVE-2026-35161 | 14 Oct 2026 | CVSS 5.3 | Dell PowerScale InsightIQDell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated… | |
| CVE-2026-101215 | 14 Oct 2026 | CVSS 6.6 | Dell Unisphere for PowerMax vAppDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command… | |
| CVE-2026-101216 | 14 Oct 2026 | CVSS 6.6 | Dell Unisphere for PowerMax vAppDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command… | |
| CVE-2026-101217 | 14 Oct 2026 | CVSS 6.5 | Dell Unisphere for PowerMax vAppDell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… | |
| CVE-2026-78339 | 9 Oct 2026 | CVSS 7.1 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource… | |
| CVE-2026-78340 | 9 Oct 2026 | CVSS 6.7 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted… | |
| CVE-2026-78341 | 9 Oct 2026 | CVSS 7.2 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged… | |
| CVE-2026-78023 | 9 Oct 2026 | CVSS 8.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key… | |
| CVE-2026-78024 | 9 Oct 2026 | CVSS 8.7 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high… | |
| CVE-2026-78025 | 9 Oct 2026 | CVSS 7.5 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function… | |
| CVE-2026-78026 | 9 Oct 2026 | CVSS 8.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key… | |
| CVE-2026-78027 | 9 Oct 2026 | CVSS 6.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high… | |
| CVE-2026-78018 | 9 Oct 2026 | CVSS 7.1 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default… | |
| CVE-2026-78019 | 9 Oct 2026 | CVSS 8.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere… | |
| CVE-2026-78020 | 9 Oct 2026 | CVSS 8.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An… | |
| CVE-2026-78021 | 9 Oct 2026 | CVSS 5.3 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive… | |
| CVE-2026-78022 | 9 Oct 2026 | CVSS 8.1 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low… | |
| CVE-2026-76769 | 9 Oct 2026 | CVSS 8.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged… | |
| CVE-2026-76779 | 9 Oct 2026 | CVSS 9.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts… | |
| CVE-2026-78013 | 9 Oct 2026 | CVSS 6.3 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default… | |
| CVE-2026-78015 | 9 Oct 2026 | CVSS 5.3 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An… | |
| CVE-2026-78016 | 9 Oct 2026 | CVSS 4.3 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input… | |
| CVE-2026-78017 | 9 Oct 2026 | CVSS 3.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions… | |
| CVE-2026-82162 | 6 Oct 2026 | CVSS 9.8 | Dell Command | Configure (DCC)Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker… | Fix |
| CVE-2026-86360 | 6 Oct 2026 | CVSS 9.6 | Dell System UpdateDell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… | Fix |
| CVE-2026-86361 | 6 Oct 2026 | CVSS 8.2 | Dell System UpdateDell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged… | Fix |
| CVE-2026-86362 | 6 Oct 2026 | CVSS 8.2 | Dell System UpdateDell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could… | |
| CVE-2026-63697 | 6 Oct 2026 | CVSS 7.2 | Dell System UpdateDell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote… | Fix |
| CVE-2026-70414 | 6 Oct 2026 | CVSS 5.5 | Dell Command | Configure (DCC)Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with… | Fix |
| CVE-2026-71168 | 6 Oct 2026 | CVSS 7.8 | Dell System UpdateDell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… | Fix |
| CVE-2026-103778 | 6 Oct 2026 | CVSS 5.5 | Dell Command | Configure (DCC)Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker… | Fix |
| CVE-2026-101207 | 6 Oct 2026 | CVSS 8.8 | Dell OpenManage IntegrationDell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements… | |
| CVE-2026-76105 | 6 Oct 2026 | CVSS 7.1 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker… | |
| CVE-2026-63690 | 6 Oct 2026 | CVSS 7.4 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the… | |
| CVE-2026-63691 | 6 Oct 2026 | CVSS 9.6 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax -… | |
| CVE-2026-67270 | 6 Oct 2026 | CVSS 7.4 | Dell Container Storage Modules (CSM)Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server… | |
| CVE-2026-67273 | 6 Oct 2026 | CVSS 9.6 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine… | |
| CVE-2026-70411 | 6 Oct 2026 | CVSS 6.5 | Dell Container Storage Modules (CSM)Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the… | |
| CVE-2026-61411 | 6 Oct 2026 | CVSS 7.7 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low… | |
| CVE-2026-63689 | 6 Oct 2026 | CVSS 6.5 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low… | |
| CVE-2026-63692 | 6 Oct 2026 | CVSS 10.0 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated… | |
| CVE-2026-67269 | 6 Oct 2026 | CVSS 9.9 | Dell Container Storage Modules (CSM)Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the… | |
| CVE-2026-54472 | 6 Oct 2026 | CVSS 7.5 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An… | |
| CVE-2026-61421 | 6 Oct 2026 | CVSS 9.8 | Dell Container Storage ModulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An… | |
| CVE-2026-63688 | 6 Oct 2026 | CVSS 10.0 | Dell Container Storage Modules (CSM)Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the… | |
| CVE-2026-76114 | 29 Sep 2026 | CVSS 5.9 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information… | |
| CVE-2026-73598 | 29 Sep 2026 | CVSS 7.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource… | |
| CVE-2026-73599 | 29 Sep 2026 | CVSS 5.4 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect')… | |
| CVE-2026-73593 | 29 Sep 2026 | CVSS 6.7 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged… | Fix |
| CVE-2026-73594 | 29 Sep 2026 | CVSS 8.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation… | Fix |
| CVE-2026-73595 | 29 Sep 2026 | CVSS 9.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity… | Fix |
| CVE-2026-73596 | 29 Sep 2026 | CVSS 6.5 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default… | Fix |
| CVE-2026-73597 | 29 Sep 2026 | CVSS 8.1 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An… | Fix |
| CVE-2026-80359 | 28 Sep 2026 | CVSS 6.8 | Dell Boot Optimized Server Storage (BOSS)Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control… | |
| CVE-2026-70413 | 28 Sep 2026 | CVSS 5.6 | Dell Live Optics CollectorDell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with… | |
| CVE-2026-80357 | 28 Sep 2026 | CVSS 7.0 | Dell Boot Optimized Server Storage (BOSS)Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control… | |
| CVE-2026-80358 | 28 Sep 2026 | CVSS 5.1 | Dell Boot Optimized Server Storage (BOSS)Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control… | |
| CVE-2026-82164 | 24 Sep 2026 | CVSS 7.1 | Dell Trusted Device Client,Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low… | |
| CVE-2026-81455 | 24 Sep 2026 | CVSS 8.6 | Dell ThinOS 10Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing Authentication for Critical Function vulnerability. An… | |
| CVE-2026-81473 | 24 Sep 2026 | CVSS 8.1 | Dell Rugged Control Center (RCC)Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local… | |
| CVE-2026-82157 | 24 Sep 2026 | CVSS 8.3 | Dell ThinOS 10Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper Certificate Validation vulnerability. An unauthenticated… | |
| CVE-2026-56792 | 24 Sep 2026 | CVSS 4.4 | Dell Rugged Control Center (RCC)Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local… | |
| CVE-2026-73591 | 23 Sep 2026 | CVSS 7.5 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code… | |
| CVE-2026-73586 | 23 Sep 2026 | CVSS 6.4 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low… | |
| CVE-2026-73587 | 23 Sep 2026 | CVSS 6.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An… | |
| CVE-2026-73588 | 23 Sep 2026 | CVSS 7.4 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function… | |
| CVE-2026-73589 | 23 Sep 2026 | CVSS 6.3 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password… | |
| CVE-2026-71177 | 23 Sep 2026 | CVSS 5.4 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames… | |
| CVE-2026-71178 | 23 Sep 2026 | CVSS 3.7 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization… | |
| CVE-2026-61413 | 23 Sep 2026 | CVSS 6.8 | Dell Secure Connect Gateway (SCG) Policy ManagerDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low… | |
| CVE-2026-22769 | 17 Feb 2026 | CVSS 10.0 | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded CredentialsDell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as… | ExploitedFix |
| CVE-2021-21551 | 4 May 2021 | CVSS 7.8 | Dell dbutil Driver Insufficient Access ControlDell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or… | Exploited |
| CVE-2020-11899 | 17 Jun 2020 | CVSS 5.4 | Treck TCP/IP stack Out-of-Bounds ReadThe Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | Exploited |