8.2
High
CVE-2026-23857 Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient…
Description
Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Update Package | 25.02.00 | No fix stated |