dell

Disclosed vulnerabilities where the NVD names dell as an affected vendor, highest CVSS first.

1. CRITICAL 10CVE-2026-636922026-10-06

   Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

   container storage modules

   AI risk analysis on Exploit-DB.ai →

2. CRITICAL 10CVE-2026-636882026-10-06

   Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability…

   container storage modules

   AI risk analysis on Exploit-DB.ai →

3. CRITICAL 10CVE-2026-704162026-09-16

   Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

   objectscale

   AI risk analysis on Exploit-DB.ai →

4. CRITICAL 9.9CVE-2026-672692026-10-06

   Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerabil…

   container storage modules

   AI risk analysis on Exploit-DB.ai →

5. CRITICAL 9.8CVE-2026-614212026-10-06

   Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of p…

   container storage modules

   AI risk analysis on Exploit-DB.ai →

6. CRITICAL 9.8CVE-2026-544722026-10-06

   Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.…

   container storage modules

   AI risk analysis on Exploit-DB.ai →

7. HIGH 8.8CVE-2026-919132026-10-30

   Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability…

   openmanage enterprise

   AI risk analysis on Exploit-DB.ai →

8. HIGH 8.2CVE-2026-711802026-09-16

   Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

   update package framework

   AI risk analysis on Exploit-DB.ai →

9. HIGH 8.1CVE-2025-439362026-09-16

   Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

   objectscale

   AI risk analysis on Exploit-DB.ai →

10. HIGH 8CVE-2026-943492026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vul…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

11. HIGH 7.7CVE-2026-780242026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disc…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

12. HIGH 7.5CVE-2026-780252026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Infor…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

13. HIGH 7.5CVE-2026-780202026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

14. HIGH 7.5CVE-2026-780192026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leadi…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

15. HIGH 7.5CVE-2026-735912026-09-23

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

16. HIGH 7.4CVE-2026-767792026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, le…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

17. HIGH 7.4CVE-2026-735882026-09-23

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unaut…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

18. HIGH 7.3CVE-2026-919122026-10-30

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

19. HIGH 7.3CVE-2026-711792026-09-16

    Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerab…

    update package framework

    AI risk analysis on Exploit-DB.ai →

20. HIGH 7.1CVE-2026-919142026-10-30

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Session theft.

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

21. HIGH 7.1CVE-2026-780232026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to El…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

22. MEDIUM 6.8CVE-2026-919072026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, le…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

23. MEDIUM 6.8CVE-2026-919152026-10-30

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent network access could potentially exploit…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

24. MEDIUM 6.8CVE-2026-780222026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mec…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

25. MEDIUM 6.8CVE-2026-735872026-09-23

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Informa…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

26. MEDIUM 6.8CVE-2026-614132026-09-23

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

27. MEDIUM 6.5CVE-2026-783412026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges an…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

28. MEDIUM 6.5CVE-2026-863582026-09-16

    Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.

    update package framework

    AI risk analysis on Exploit-DB.ai →

29. MEDIUM 6.4CVE-2026-919052026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacke…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

30. MEDIUM 6.4CVE-2026-735862026-09-23

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

31. MEDIUM 6.3CVE-2026-783402026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with local access could potentially exploit thi…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

32. MEDIUM 6.3CVE-2026-783392026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading t…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

33. MEDIUM 6.3CVE-2026-780182026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading t…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

34. MEDIUM 6.3CVE-2026-735892026-09-23

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to In…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

35. MEDIUM 6.1CVE-2026-919112026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability,…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

36. MEDIUM 6.1CVE-2026-919032026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability,…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

37. MEDIUM 5.8CVE-2026-780272026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disc…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

38. MEDIUM 5.7CVE-2026-919102026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, …

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

39. MEDIUM 5.7CVE-2026-919082026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution.

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

40. MEDIUM 5.5CVE-2026-919062026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypa…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

41. MEDIUM 5.5CVE-2026-919042026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypa…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

42. MEDIUM 5.5CVE-2026-761042026-09-16

    Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

    objectscale

    AI risk analysis on Exploit-DB.ai →

43. MEDIUM 5.4CVE-2026-711772026-09-23

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading t…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

44. MEDIUM 5.2CVE-2026-780132026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading …

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

45. MEDIUM 4.6CVE-2026-919092026-11-02

    Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerabili…

    openmanage enterprise

    AI risk analysis on Exploit-DB.ai →

46. MEDIUM 4.3CVE-2026-780262026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to El…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

47. MEDIUM 4.3CVE-2026-767692026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

48. LOW 3.8CVE-2026-780172026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading …

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

49. LOW 3.7CVE-2026-780212026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, …

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

50. LOW 3.7CVE-2026-780152026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

51. LOW 3.7CVE-2026-711782026-09-23

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, l…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

52. LOW 3.1CVE-2026-780162026-10-09

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Info…

    policy manager for secure connect gateway

    AI risk analysis on Exploit-DB.ai →

53. LOW 3CVE-2026-711822026-09-16

    Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesyste…

    update package framework

    AI risk analysis on Exploit-DB.ai →

54. LOW 3CVE-2026-711812026-09-16

    Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesyste…

    update package framework

    AI risk analysis on Exploit-DB.ai →