CVE-2026-86361

Summary

Dell System Update has a permission assignment flaw that allows low-privileged local users to gain elevated privileges. This creates a path for attackers to move from a standard user account to system-level access.

Exploitability

Exploitation requires a low-privileged local user with access to the Dell System Update application, making it moderately difficult to achieve but not highly complex.

Blast radius

If exploited, this vulnerability could allow attackers to gain full system control from a local user account, potentially leading to complete system compromise and data exfiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Dell System Update version 2.3.0.0 or later to remediate the Incorrect Permission Assignment vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.