CVE-2026-86359: High severity Dell Repository Manager vulnerability
Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Repository Managerto a version that resolves this vulnerability.Fixed in 3.5.2
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Deployments of Dell Repository Manager earlier than version 3.5.2 are affected. Exploitation requires remote access and an existing low-privileged attacker account or equivalent low-privileged access.
What level of access does an attacker need, and what could they gain?
The attacker must already have low-privileged access and be able to reach the affected system remotely. Successful exploitation could allow elevation of privileges, with high potential impact to confidentiality, integrity, and availability.
What version resolves the issue?
Upgrade Dell Repository Manager to version 3.5.2 or later. The provided data does not identify any workaround or compensating control for systems that cannot be updated immediately.