#dell
12 articles
CVE-2026-82158: Cross-Site Scripting in Dell Wyse Management Suite
Dell Wyse Management Suite versions prior to 2609.0.0.155 contain a Cross-site Scripting vulnerability: a low-privileged attacker with remote access could inject script into the console interface...
CVE-2026-63688 and 5 More: Critical Flaws in Dell Container Storage Modules
Dell fixed six critical flaws in Container Storage Modules 1.18.0, including missing authentication in the csm-authorization-storage gRPC server that exposes storage array administrator credentials...
CVE-2026-58574: Missing Authentication in Dell PowerStore Management Interface
A critical function in the Dell PowerStore management interface requires no authentication. An attacker can read information from the appliance filesystem, including administrative credentials...
CVE-2026-67271: Remote code execution via SMB in Dell PowerStore
An out-of-bounds write in SMB/CIFS handling in Dell PowerStore SDNAS. A crafted SMB packet causes a crash that persists despite automatic restarts...
CVE-2026-40712: Privilege Escalation in Dell PowerProtect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially explo...
CVE-2026-46738: Improper Input Validation in Dell PowerProtect Data Manager
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially explo...
CVE-2026-56688: OS Command Injection in Dell PowerFlex Manager
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker wit...
CVE-2026-53481: unauthenticated path traversal in Dell PowerProtect Data Domain (CVSS 9.8)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 throu...
CVE-2026-53483: improper authentication enabling full system takeover in Dell PowerProtect Data Domain (CVSS 9.8)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 throu...
CVE-2026-41120: acceptance of extraneous untrusted data enabling RCE in Dell Wyse Management Suite (CVSS 9.8)
Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potent...
CVE-2026-40636: Hard-coded Credentials in Dell ECS and ObjectScale
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0 contain a hard-coded credentials vulnerability allowing unauthenticated local attackers to gain filesystem access...
CVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlyin...