Dell vulnerabilities
We track 854 vulnerabilities in Dell products across 60+ products. 853 are rated high or critical, and 3 have been exploited in real attacks. The most recent was published on November 13, 2026.
Latest Dell vulnerabilities
- 7.8 High severity
CPG SW: Improper Limitation of a Pathname to a Restricted Directory
Dell Command | Integration Suite for System Center, versions prior to 6.2.0, contains arbitrary file write vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability in order to perform an arbitrary write as system.
- 8.0 High severity
Unisphere for PowerMax: Incorrect Resource Transfer Between Spheres
Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to.
- 8.8 High severity
Dell Container Storage Modules: Improper Neutralization of Special Elements used in an OS Command
Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability leading to to execute arbitrary OS commands on the affected system.
- 9.8 Critical severity
Smart Fabric Storage Software: Improper Neutralization of Special Elements used in an OS Command
SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access and perform actions on the affected system.
- 7.5 High severity
Wyse Management Suite: Generation of Error Message Containing Sensitive Information
Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. An attacker could potentially exploit this vulnerability, leading to the disclosure of certain sensitive information. The attacker may be able to use the exposed
- 8.8 High severity
Wyse Management Suite: Cleartext Storage of Sensitive Information
Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be abl
- 8.8 High severity
Data Protection Central: Cross-Site Request Forgery
Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contain(s) a Cross-Site Request Forgery Vulnerability. A(n) remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server o
- 7.8 High severity
PowerStore: Improper Neutralization of Special Elements used in an OS Command
Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the Power
- 7.8 High severity
PowerStore: Uncontrolled Search Path Element
Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this vulnerability to execute arbitrary code, escalate privileges, and bypass software allow list solutions, leading to sy
- 9.8 Critical severity
PowerStore: Improper Restriction of Excessive Authentication Attempts
Dell EMC PowerStore, contain(s) an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore Manager GUI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account tak
- 9.8 Critical severity
PowerScale OneFS: Use of a Broken or Risky Cryptographic Algorithm
Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access.
- 7.8 High severity
Prior Dell BIOS versions contain an Input Validation vulnerability.
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
- 7.8 High severity
Prior Dell BIOS versions contain an Input Validation vulnerability.
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
- 7.8 High severity
Prior Dell BIOS versions contain an Input Validation vulnerability.
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.
- 9.6 Critical severity
SupportAssist Consumer: Improper Neutralization of Input During Web Page Generation
Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability. A remote unauthenticated malicious user could potentially exploit this vulnerabilit
- 7.1 High severity
SupportAssist Client Consumer: Improper Limitation of a Pathname to a Restricted Directory
Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion/overwrite vulnerability. Authenticated non-admin user could exploit the issu
- 7.1 High severity
SupportAssist Client Commercial: Improper Limitation of a Pathname to a Restricted Directory
Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability. Authenticated non-admin user could exploit the issue and dele
- 7.8 High severity
SupportAssist Consumer: Uncontrolled Search Path Element
Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist Client Commercial versions (3.2.0 and versions prior) contain a privilege escalation vulnerability. A non-admin user can exploit the vulnerability and gain admin acc
- 9.8 Critical severity
Unity: Improper Restriction of Excessive Authentication Attempts
Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit this vulnerability to brute-force passwords and gain access
- 9.8 Critical severity
PowerStore: Exposure of Resource to Wrong Sphere
Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and arbitrary code execution.
- 7.8 High severity
PowerStore: Improper Neutralization of Special Elements used in an OS Command
Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS,
- 8.0 High severity
PowerStore: Improper Neutralization of Formula Elements in a CSV File
PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, without any validation or sanitization. It allows a malicious, authenticated user to inject payloads that might get interpreted as formulas by t
- 7.8 High severity
PowerStore: Insufficiently Protected Credentials
PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x and 2.0.1.x A locally authenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credent
- 7.5 High severity
PowerStore: Uncontrolled Resource Consumption
Dell PowerStore contains an Uncontrolled Resource Consumption Vulnerability in PowerStore User Interface. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the Denial of Service.
- 7.5 High severity
PowerScale OneFS: Weak Password Requirements
Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no password. A remote attacker may potentially exploit this leading to a user account compromise.
- 8.8 High severity
OpenManage Enterprise: Improper Authorization
Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized
- 9.8 Critical severity
Integrated Dell Remote Access Controller 9: Improper Authentication
Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the VNC Console.
- 7.8 High severity
Dell Repository Manager (DRM): Insufficiently Protected Credentials
Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed cr
- 7.5 High severity
AppSync: Improper Limitation of a Pathname to a Restricted Directory
Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with
- 7.5 High severity
Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability.
Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition.
- 7.5 High severity
PowerScale OneFS: Improper Handling of Values
Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to denial-of-service.
- 7.8 High severity
PowerScale OneFS: Exposure of Resource to Wrong Sphere
Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentiall
- 7.5 High severity
PowerScale OneFS: Improper Handling of Exceptional Conditions
Dell PowerScale OneFS versions 8.2.x - 9.3.0.x contain a denial-of-service vulnerability in SmartConnect. An unprivileged network attacker may potentially exploit this vulnerability, leading to denial-of-service.
- 7.5 High severity
PowerScale OneFS: Improper Handling of Values
Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated network attacker could potentially exploit this denial-of-service vulnerability.
- 9.8 Critical severity
PowerScale OneFS: Improper Restriction of Excessive Authentication Attempts
Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts.
- 7.5 High severity
PowerScale OneFS: Use of a Broken or Risky Cryptographic Algorithm
Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm. An unprivileged network attacker could exploit this vulnerability, leading to the potential for information disclosure.
- 8.1 High severity
PowerScale OneFS: Improper Certificate Validation
Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials.
- 9.8 Critical severity
PowerScale OneFS: Use of a Broken or Risky Cryptographic Algorithm
Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access
- 9.8 Critical severity
PowerScale OneFS: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to an account compromise.
- 9.1 Critical severity
PowerScale OneFS: Use of Insufficiently Random Values
Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to data loss.