CVE-2026-71168

High7.3 Published on Oct 6, 2026

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution.

CVSS score7.3 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-22

Vulnerabilities

Critical Dell System Update Flaw Opens a Remote Path to Root Access

Dell patched critical CVE-2026-86360 in System Update allowing unauthenticated remote root code execution. Upgrade to DSU 2.3.0.0 now.

Oct 5, 202616:53 5 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Critical Dell System Update Flaw Opens a Remote Path to Root Access