Dell vulnerabilities
1,887 CVEs and advisories name Dell as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-74774Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability.
- CVE-2026-67275Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability.
- CVE-2026-68861Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comman
- CVE-2026-68863Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability.
- CVE-2026-71172Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability.
- CVE-2026-71171Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Com
- CVE-2026-70419Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Com
- CVE-2026-79940Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability.
- CVE-2026-63693Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.
- CVE-2026-61419Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability.
- CVE-2026-53477Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
- CVE-2026-58564Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability.
- CVE-2026-67268Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability.
- CVE-2026-58565Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.
- CVE-2026-67266Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability.
- CVE-2026-58562Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.
- CVE-2026-67267Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vu
- CVE-2026-56797Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
- CVE-2026-49816Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.
- CVE-2026-49817Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.
- CVE-2026-56796Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.
- CVE-2026-23501Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Co
- CVE-2026-32802Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability.
- CVE-2026-71176Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In
- CVE-2026-54793Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Sc
- CVE-2026-54794Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.
- CVE-2026-70424Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversa
- CVE-2026-70422Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In
- CVE-2026-70423Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability.
- CVE-2026-56088Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In