LIVE · cybersecurity feed
Live wire
vendor

Dell

81 CVEs published in the last four months and 2 stories. Exploited flaws first.

Critical10
High68
Medium1
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-672619.8criticalvirtual storage integratorDell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command I76d ago
CVE-2026-406369.8criticalelastic cloud storageDell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-c163d ago
CVE-2026-534819.8criticaldata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS106d ago
CVE-2026-534839.8criticaldata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS106d ago
CVE-2026-411209.8criticalwyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With118d ago
CVE-2026-704199.1criticalcloud disaster recoveryDell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used55d ago
CVE-2026-544899.1criticalvirtual storage integratorDell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Inf76d ago
CVE-2026-566889.1criticalpowerflex managerDell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used i103d ago
CVE-2026-467389.1criticalpowerprotect data managerDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability 91d ago
CVE-2026-407129.1criticalpowerprotect data managerDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability 91d ago
CVE-2026-585658.8highcommand updateDell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.63d ago
CVE-2026-350658.8highpowerflex managerDell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vul126d ago
CVE-2026-494998.8highpowerprotect data managerDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens v91d ago
CVE-2026-747708.8highpowerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in55d ago
CVE-2026-711768.8highopenmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used 63d ago
CVE-2026-547958.8highopenmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used 63d ago
CVE-2026-560868.8highdata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS105d ago
CVE-2026-442728.8highwyse management suiteDell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elemen120d ago
CVE-2026-544698.8highunisphere for powermaxDell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnera103d ago
CVE-2026-688618.8highpowerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in55d ago
CVE-2026-566908.5highpowerflex managerDell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used i103d ago
CVE-2026-350718.2highinsightiqDell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements u162d ago
CVE-2026-704228.1highopenmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used 63d ago
CVE-2026-442718.1highwyse management suiteDell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elemen120d ago
CVE-2026-328048.1highpowerflex managerDell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability.126d ago
CVE-2026-326588highautomation platformDell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulnerability.163d ago
CVE-2026-326527.8highaiops collectorDell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability.126d ago
CVE-2026-566867.8highobjectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an 65d ago
CVE-2026-599107.8highobjectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an 65d ago
CVE-2026-407157.8highthinosDell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability.141d ago
CVE-2026-464617.8highserver hardware managerDell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability.124d ago
CVE-2026-442747.8highwyse management suiteDell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Acce120d ago
CVE-2026-467337.8highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vuln118d ago
CVE-2026-467357.8highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Speci118d ago
CVE-2026-614197.8highthinosDell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability.57d ago
CVE-2026-585647.8highcommand updateDell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability.63d ago
CVE-2026-467317.8highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass b69d ago
CVE-2026-599147.8highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass b69d ago
CVE-2026-599167.8highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vu69d ago
CVE-2026-599177.8highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vu69d ago
CVE-2026-637007.8highwyse management suiteDell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerabilit68d ago
CVE-2026-498177.8highcommand updateDell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.63d ago
CVE-2026-498167.8highcommand updateDell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.63d ago
CVE-2026-238627.8highthinosDell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used 219d ago
CVE-2026-406337.8highpowerscale onefsDell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion 98d ago
CVE-2026-534777.8highcommand updateDell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vu63d ago
CVE-2026-599127.8highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control v78d ago
CVE-2026-599137.8highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for78d ago
CVE-2026-567937.7highopenmanage server administratorDell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerabilit75d ago
CVE-2026-566897.7highpowerflex managerDell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used i103d ago
CVE-2026-799387.6highpowerprotect cyber recoveryDell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability.55d ago
CVE-2026-688637.5highpowerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability.55d ago
CVE-2025-327507.5highpowerflex appliance intelligent catalogDell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulner154d ago
CVE-2026-534827.5highdata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS105d ago
CVE-2026-222837.5highpowerflex managerDell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Contr126d ago
CVE-2026-495027.4highpowerflex managerDell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability.126d ago
CVE-2026-585627.3highcommand updateDell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.63d ago
CVE-2026-467347.3highdisplay and peripheral managerDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation 118d ago
CVE-2026-411217.3highdevice management agentDell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access111d ago
CVE-2026-560907.3highobjectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability.65d ago
CVE-2026-566857.3highobjectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an 65d ago
CVE-2026-567977.3highcommand updateDell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabil63d ago
CVE-2026-547967.2highopenmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used 63d ago
CVE-2026-534797.2highdata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS106d ago
CVE-2026-534787.2highdata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS110d ago
CVE-2026-498157.2highdata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS110d ago
CVE-2026-498147.2highdata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS110d ago
CVE-2026-711717.2highcloud disaster recoveryDell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used55d ago
CVE-2026-495067.2highwyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restr118d ago
CVE-2026-547947.2highopenmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.63d ago
CVE-2026-704217.2highopenmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.63d ago
CVE-2026-662717.2highwyse management suiteDell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerou68d ago
CVE-2026-662707.2highwyse management suiteDell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerou68d ago
CVE-2026-407147.2highpowerprotect data managerDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability.91d ago
CVE-2026-411227.1highdata domain operating systemDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS105d ago
CVE-2026-599097.1highobjectscaleDell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability.65d ago
CVE-2026-560887.1highopenmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used 63d ago
CVE-2026-350667.1highpowerflex managerDell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability.126d ago
CVE-2026-245106.7mediumalienware command centerDell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Privilege Management vulner223d ago
CVE-2026-245093.6lowalienware command centerDell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Access Control vulnerabilit223d ago
CVE-2026-245082.5lowalienware command centerDell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Certificate Validation vuln223d ago

Filter the full tracker by Dell →

Our coverage of Dell

CVE-2026-86360critical

Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access

Dell has issued an urgent advisory to customers, recommending they patch a critical vulnerability in its System Update (DSU) tool that could allow attackers to gain root access on affected PowerEdge servers. The flaw, identified as CVE-2026-86360, carries a CVSS score of 9.6, indicating its severe potential impact.

CVE-2026-63688critical

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell has issued security updates to address several critical vulnerabilities within its Container Storage Modules (CSM) that could be leveraged by malicious actors to compromise affected systems. Among the disclosed flaws is CVE-2026-63688, which has been assigned a CVSS score of 10.0. This particular vulnerability is described as a missing authentication for critical function flaw residing in…