CVE-2026-86358: Buffer Overflow
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Update Package Frameworkto a version that resolves this vulnerability.Fixed in 26.07.03
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments running Dell Update Package Framework versions earlier than 26.07.03 are affected. Exploitation requires adjacent network access, rather than access from an arbitrary remote network location.
Does an attacker need credentials or user interaction?
No. The vulnerability is described as exploitable by an unauthenticated attacker and does not require user interaction.
What is the likely impact if exploitation succeeds?
Successful exploitation could lead to remote code execution. The stated CVSS vector indicates availability impact, with no listed confidentiality or integrity impact.
What version should be deployed to remediate the issue?
Update Dell Update Package Framework to version 26.07.03 or later.