Dell vulnerabilities
We track 854 vulnerabilities in Dell products across 60+ products. 853 are rated high or critical, and 3 have been exploited in real attacks. The most recent was published on November 13, 2026.
Latest Dell vulnerabilities
- 7.8 High severity
Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control…
Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low privilege user could potentially exploit this vulnerability by modifying files in the installation folder to execute arbitrary code, leading to
- 7.8 High severity
Dell Digital Delivery (D3): Buffer Copy without Checking Size of Input
Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to arbitrary code execution and/or privilege escalation.
- 7.8 High severity
Dell Digital Delivery (D3): Use After Free
Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to application crash or execution of arbitrary code.
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of mal
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaS
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaS
- 8.0 High severity
Secure Connect Gateway (SCG) Policy Manager: Weak Password Recovery Mechanism for Forgotten Password
Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to the
- 7.6 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of maliciou
- 7.3 High severity
Secure Connect Gateway (SCG) Policy Manager: Improper Authorization
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized devices added to policies. Exploi
- 7.3 High severity
DUP Framework: Uncontrolled Search Path Element
Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin.
- 8.8 High severity
Secure Connect Gateway (SCG) 5.0 Appliance - SRS: Authentication Bypass by Spoofing
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fak
- 9.8 Critical severity
RecoverPoint for VMs: Improper Neutralization of Special Elements used in an OS Command
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get execut
- 9.8 Critical severity
RecoverPoint for VMs: Improper Restriction of Excessive Authentication Attempts
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against
- 9.8 Critical severity
ESI (Enterprise Storage Integrator) for SAP LAMA: Cleartext Transmission of Sensitive Information
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthenticated attacker could potentially exploit this vulnerability by eavesdropping the network traffic to gai
- 9.8 Critical severity
ESI (Enterprise Storage Integrator) for SAP LAMA: Improper Access Control
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthenticated attacker could potentially exploit this vulnerability by eavesdropping the network traffic to gai
- 9.8 Critical severity
Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below…
Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest admin
- 9.8 Critical severity
Dell SmartFabric OS10: Improper Neutralization of Special Elements used in an OS Command
Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary
- 9.1 Critical severity
Dell SmartFabric OS10: Improper Restriction of Communication Channel to Intended Endpoints
Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a possible Denial of Servi
- 7.8 High severity
SupportAssist for Home PCs: Improper Access Control
In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable
- 8.8 High severity
PowerProtect Data Manager: Weak Password Recovery Mechanism for Forgotten Password
Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgotten passwords. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to the applicat
- 7.2 High severity
PowerProtect Data Manager: Improper Neutralization of Special Elements used in an OS Command
Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the applicatio
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system comma
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_dc utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability execute commands with root privileges.
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root pr
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_nas utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_cbr utility. An authenticated malicious user with local access could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on t
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility. An authenticated malicious user with local access could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cava utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands wit
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains a Command Injection Vulnerability in svc_oscheck utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability to inject arbitrary operating system commands. This vulnerabili
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files on the file system with r
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_tcpdump utility. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands with elevated privileges.
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_acldb_dump utility. An authenticated attacker could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privi
- 7.8 High severity
Unity: Improper Neutralization of Special Elements used in an OS Command
Dell Unity, versions prior to 5.4, contain an OS Command Injection Vulnerability in its svc_topstats utility. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary commands with elevated privileges.
- 7.8 High severity
Dell Encryption: Improper Access Control
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potent
- 7.1 High severity
DUP Framework: Improper Link Resolution Before File Access
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service
- 7.8 High severity
Dell Display Manager: Improper Privilege Management
Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during installation and uninstallation
- 9.8 Critical severity
Data Protection Search: Insertion of Sensitive Information into Externally-Accessible File or Directory
Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss
- 7.1 High severity
Dell Command Monitor (DCM): Improper Privilege Management
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete.
- 7.8 High severity
Dell Power Manager (DPM): Improper Handling of Exceptional Conditions
Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system.
- 9.8 Critical severity
Dell BSAFE Crypto-J: Reliance on Component That is Not Updateable
Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading