CVE-2026-71180

8.2 HIGH

Published 2026-09-16 · Updated 2026-09-21

AI risk analysis

Summary: The Dell Update Package Framework prior to 26.07.03 has an Unchecked Return Value vulnerability, allowing a low-privileged attacker with local access to potentially gain higher privileges.
Exploitability: Exploitation requires local access and is moderately difficult, as the attacker must identify and manipulate the affected return value.
Blast radius: If exploited, this vulnerability could lead to full system compromise and unauthorized access to sensitive data or system resources.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to 26.07.03 or later of the Dell Update Package Framework.

priv-escalationlocal-privilegepatch-required

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-252

Vendors

dell

Products

update package framework

References

https://www.dell.com/support/kbdoc/en-us/000509455/dsa-2026-417-security-update-for-dell-update-package-dup-framework-vulnerabilities Vendor Advisory

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.