7.3
High
CVE-2026-71179 Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements…
Description
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Update Package Framework | Versions not published |
Other CVEs of Update Package Framework
The 5 CVEs of Update Package Framework →
CVE-2026-86358
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability
6.5
Medium
CVE-2026-71182
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access…
3.0
Low
CVE-2026-71181
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access…
3.0
Low
CVE-2026-71180
Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability
8.2
High