← Back to Vulnerability Reports CVE Intelligence

CVE-2026-86360

Dell System Update•CRITICAL · CVSS 9.6•No exploitation reported

What is CVE-2026-86360?

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This vulnerability is considered critical because it can be leveraged by an unauthenticated attacker to execute arbitrary code with root privileges. Successful exploitation may allow complete compromise of the vulnerable application and underlying operating system. Dell recommends customers upgrade at the earliest opportunity.

CVSS9.6 CNA/ADP score via NVD 3.1
SeverityCRITICAL
ExploitationNo exploitation reported
EPSS1% · P49
Triage statusNo Known Exploit
ActionPatch within 48 hours
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CWECWE-22
NVD published2026-10-06
NVD last modified2026-10-13

Timeline

  • 2026-10-06Published to the U.S. National Vulnerability Database (NVD)
  • 2026-10-06First covered in a defend.network daily briefing
  • 2026-10-13NVD record last updated

Affected product

Dell System Update

References

Referenced in our briefings & reports

Related vulnerabilities

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.