Dell vulnerabilities
1,887 CVEs and advisories name Dell as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-46461Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability.
- CVE-2026-32652Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability.
- CVE-2025-32748Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability.
- CVE-2026-35069Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL
- CVE-2026-35068Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL
- CVE-2026-35066Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability.
- CVE-2026-35067Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability.
- CVE-2026-35162Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability.
- CVE-2026-35065Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability.
- CVE-2026-32804Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability.
- CVE-2026-49502Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability.
- CVE-2026-22283Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability.
- CVE-2026-40641Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability.
- CVE-2024-47477Dell PowerFlex Manager, versions prior to 4.5.1.1, contain an improper certificate validation vulnerability.
- CVE-2024-39575update_disk_psu_baseline.sh requires password in plain text
- CVE-2024-38487api-gateway container running with root privilege would allow an attacker to escape the container and access host system to perform unintend
- CVE-2024-30476PowerStore contains a Stored Cross-Site Scripting Vulnerability in the PowerStore Manager.
- CVE-2024-24909Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin.
- CVE-2024-22451Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability.
- CVE-2024-22447Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability.
- CVE-2026-40639Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability.
- CVE-2026-44275Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnera
- CVE-2026-41116Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnera
- CVE-2026-28262Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability.
- CVE-2025-46638Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability.
- CVE-2026-40715Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability.
- CVE-2026-40713Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability.
- CVE-2022-34363Dell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass vulnerability in the Unisphere for VMAX applic
- CVE-2022-31231Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module.
- CVE-2021-21508Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager.