← Back to search

CVE-2026-86360

9.6 CRITICAL

Published 2026-10-06 · Updated 2026-10-06

AI risk analysis

Summary
The flaw is a Path Traversal vulnerability in Dell System Update versions prior to 2.3.0.0, allowing unauthenticated attackers to gain filesystem access and potentially execute arbitrary code with root privileges.
Exploitability
Exploitation is relatively straightforward with remote access, requiring no specific preconditions other than the target being running an affected version of Dell System Update.
Blast radius
If exploited, this vulnerability could lead to complete compromise of the application and underlying operating system, with attackers gaining root privileges.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to 2.3.0.0 or later.
rcepath-traversalremotecritical

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This vulnerability is considered critical because it can be leveraged by an unauthenticated attacker to execute arbitrary code with root privileges. Successful exploitation may allow complete compromise of the vulnerable application and underlying operating system. Dell recommends customers upgrade at the earliest opportunity.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-22

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.