CVE-2026-49811
8.4 HIGHPublished 2026-09-21 · Updated 2026-09-22
AI risk analysis
- Summary
- This vulnerability in Dell Command | Monitor (DCM) versions prior to 10.13.2 allows a low-privileged local attacker to gain elevated privileges, leading to potential system compromise.
- Exploitability
- Exploitation is relatively straightforward for an attacker with local access, as no specific technical details are provided beyond the existence of the vulnerability.
- Blast radius
- If exploited, the impact is high, as it could lead to complete control over the affected system, potentially affecting data integrity and system security.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to DCM version 10.13.2 or later.
priv-escalationlocal-privilegepatch-recommended
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Weaknesses
CWE-732
References
Data: NVD (public domain). Analysis: local $0 model. Defensive use only.