CVE-2026-71179

7.3 HIGH

Published 2026-09-16 · Updated 2026-09-21

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Vendors

dell

Products

update package framework

All references

https://www.dell.com/support/kbdoc/en-us/000509455/dsa-2026-417-security-update-for-dell-update-package-dup-framework-vulnerabilities

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-13477
HIGHCVE-2026-16022PoC
HIGHCVE-2026-16793
HIGHCVE-2026-18900PoC
CRITICALCVE-2026-20305
CRITICALCVE-2026-20306
UNSCOREDCVE-2026-40855
HIGHCVE-2026-55897PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.