← Back to search

CVE-2026-81469

7.8 HIGH

Published 2026-09-21 · Updated 2026-09-24

AI risk analysis

Summary
The flaw in Dell Inventory Collector Client versions prior to 15.0.0 allows a low-privileged attacker with local access to execute arbitrary code and gain elevated privileges due to an unquoted search path vulnerability.
Exploitability
Exploitation is relatively straightforward for an attacker with local access, as the vulnerability can be triggered through a crafted path or element.
Blast radius
If exploited, the impact could be severe, as it allows for code execution and privilege escalation, potentially leading to full system compromise.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to version 15.0.0 or later.
rcepriv-escalationlocal-privilegeunquoted-search-path

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-428

References

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.