Vulnerabilities (CVE)

Filtered by vendor Dell Subscribe
Total 1758 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-78487 1 Dell 1 Secure Connect Gateway 2026-09-09 N/A 5.5 MEDIUM
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
CVE-2026-79734 1 Dell 1 Secure Connect Gateway 2026-09-09 N/A 5.9 MEDIUM
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
CVE-2026-80129 1 Dell 1 Secure Connect Gateway 2026-09-09 N/A 6.5 MEDIUM
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-80130 1 Dell 1 Secure Connect Gateway 2026-09-09 N/A 7.1 HIGH
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-80131 1 Dell 1 Secure Connect Gateway 2026-09-09 N/A 7.4 HIGH
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-80164 1 Dell 1 Secure Connect Gateway 2026-09-09 N/A 7.4 HIGH
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
CVE-2026-70419 1 Dell 1 Cloud Disaster Recovery 2026-09-03 N/A 9.1 CRITICAL
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
CVE-2026-71171 1 Dell 1 Cloud Disaster Recovery 2026-09-03 N/A 7.2 HIGH
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-71172 1 Dell 1 Cloud Disaster Recovery 2026-09-03 N/A 4.3 MEDIUM
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
CVE-2026-61419 1 Dell 1 Thinos 2026-09-02 N/A 7.8 HIGH
Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-49809 1 Dell 1 Powerprotect Cyber Recovery 2026-09-02 N/A 6.5 MEDIUM
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-79939 1 Dell 1 Powerprotect Cyber Recovery 2026-09-01 N/A 5.8 MEDIUM
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.
CVE-2026-79938 1 Dell 1 Powerprotect Cyber Recovery 2026-09-01 N/A 7.6 HIGH
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-74774 1 Dell 1 Powerprotect One 2026-08-28 N/A 5.9 MEDIUM
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
CVE-2026-74771 1 Dell 1 Powerprotect One 2026-08-28 N/A 6.5 MEDIUM
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-74770 1 Dell 1 Powerprotect One 2026-08-28 N/A 8.8 HIGH
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
CVE-2026-68863 1 Dell 1 Powerprotect One 2026-08-28 N/A 7.5 HIGH
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
CVE-2026-68861 1 Dell 1 Powerprotect One 2026-08-28 N/A 8.8 HIGH
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-67275 1 Dell 1 Powerprotect One 2026-08-28 N/A 5.3 MEDIUM
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.
CVE-2026-54794 1 Dell 1 Openmanage Enterprise 2026-08-21 N/A 7.2 HIGH
Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.