CVE-2026-86360: Path Traversal
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This vulnerability is considered critical because it can be leveraged by an unauthenticated attacker to execute arbitrary code with root privileges. Successful exploitation may allow complete compromise of the vulnerable application and underlying operating system. Dell recommends customers upgrade at the earliest opportunity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell System Updateto a version that resolves this vulnerability.Fixed in 2.3.0.0
Event History
Frequently Asked Questions
Which installations are affected?
Dell System Update versions earlier than 2.3.0.0 are affected. The provided information does not identify any configuration prerequisites or exceptions.
Does exploitation require authentication or local access?
No authentication is required, and the attacker can exploit the issue remotely. User interaction is required according to the supplied CVSS vector.
What is the potential impact of successful exploitation?
Successful exploitation may provide filesystem access and allow arbitrary code execution with root privileges. This can result in complete compromise of the vulnerable application and underlying operating system.
What remediation is available?
Upgrade Dell System Update to version 2.3.0.0 or later. Dell recommends upgrading at the earliest opportunity.