Skip to content
OpenAdvisories
High · 7.3 CVE-2026-71179 EUVD-2026-80862GHSA-jr4q-rwvq-9gqm

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('…

Published Sep 16, 2026 · Updated Sep 17, 2026 · Assigned by dell

Description

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected products

VendorProductAffectedFixed
Dell Update Package Framework < 26.07.03 or later 26.07.03 or later

References