CVE-2026-71168: Path Traversal
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell System Updateto a version that resolves this vulnerability.Fixed in 2.3.0.0
Event History
Frequently Asked Questions
Which installations are affected?
Dell System Update versions earlier than 2.3.0.0 are affected. Systems running version 2.3.0.0 or later are not identified as affected by the provided information.
What access does an attacker need to exploit this issue?
An attacker needs local access and low-level privileges. Exploitation also requires user interaction, according to the listed attack vector metrics.
What is the potential impact of successful exploitation?
Successful exploitation could lead to remote execution. The vulnerability is also rated as having high potential impact on confidentiality, integrity, and availability.