6.5
Moyenne
CVE-2026-67268 Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference…
Description
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dell Command Update (DCU) 5.7 | premières → < 5.7.1 | 5.7.1 |
Autres CVE de Dell Command Update (DCU)
Les 21 CVE de Dell Command Update (DCU) →
CVE-2026-53477
Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition…
7.8
Élevée
CVE-2026-58564
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability
7.8
Élevée
CVE-2026-58565
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability
8.8
Élevée
CVE-2026-67266
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability
5.5
Moyenne