Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku.
Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl
jen odkazovat, třeba jako na starší kauzu.
Serial number: AV26-1110 Date: November 2, 2026 As of October 30, 2026, Dell is affected by vulnerabilities in the following products: OpenManage Enterprise Prior to 4.8.0 PowerProtect Data Domain Prior to 7.13.1.90 Prior to 8.3.1.50 Prior to 8.6.1.30 Prior to 8.9.0.0 PowerProtect Data Domain Management Center Prior to 7.13.1.90 Prior to 8.3.1.50 Prior to 8.6.1.30 Prior to 8.9.0.0 PowerProtect Data Domain Virtual Edition Prior to 7.13.1.90 Prior to 8.3.1.50 Prior to 8.6.1.30 Prior to 8.9.0.0…
Dell heeft meerdere kritieke kwetsbaarheden verholpen in PowerProtect Data Domain, Data Domain Virtual Edition en Data Domain Management Center. De kritieke wetsbaarheden met kenmerk CVE-2026-103780, CVE-2026-86384, CVE-2026-86397 en CVE-2026-86400 in Dell PowerProtect Data Domain, hebben een CVSS-score van 9.8. Een niet-geauthenticeerde kwaadwillende kan deze kwetsbaarheden op afstand misbruiken om willekeurige opdrachten uit te voeren, inloggegevens te verkrijgen of accounts met verhoogde…
Aggiornamenti di sicurezza Dell Technologies sanano molteplici vulnerabilità, di cui 7 con gravità "critica" e 18 con gravità "alta" che interessano i prodotti PowerProtect Data Domain, Data Domain Virtual Edition e Dell APEX Protection Storage, soluzioni di storage per backup e protezione dei dati basate sulla tecnologia Data Domain.
Legitimate infrastructure has become a powerful delivery mechanism for attackers, carrying the inherent trust they once had to build. As Cisco Talos explored in our previous research on weaponizing software-as-a-service (SaaS) notification pipelines, these platforms are increasingly repurposed as proxies for malicious intent. Talos has since tracked a significant acceleration in this trend, observing abuse across more than 25 distinct legitimate platforms in the past year. The abused…
Serial number: AV26-1027 Date: October 13, 2026 As of October 6, 2026, Dell is affected by vulnerabilities in the following products: Command | Configure (DCC) Prior to 5.2.3.35 Dell Container Storage Modules (CSM) Prior to 1.18.0 Dell OpenManage Integration with Microsoft Windows Admin Center (OMIMSWAC) Prior to 3.7.0 Dell Policy Manager for Secure Connect Gateway - Appliance Prior to 5.36.00.16 Dell System Update (DSU) Prior to 2.3.0.0 The Cyber Centre encourages users and administrators to…
V dnešním díle našich Postřehů z bezpečnosti, které vyšly na Root.cz, se podíváme na podvodně získané certifikáty google.as, google.com.gh, youtube.sl a další, koukneme se na zranitelnosti v Dell CSM s upozorníme na firefoxové kapsáře pasoucí po našich peněženkách.
Rilasciati aggiornamenti di sicurezza che sanano molteplici vulnerabilità, di cui 18 con gravità "alta" in Dell Secure Connect Gateway (SCG) Policy Manager, soluzione per la gestione delle autorizzazioni relative agli accessi remoti, all’esecuzione di script e ai trasferimenti di file effettuati tramite Secure Connect Gateway, nonché per la registrazione delle relative attività di audit.
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-63697, CVE-2026-86360, CVE-2026-86361, CVE-2026-86362, CVE-2026-71168, Summary: Dell System Update (DSU) remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system. CVE-2026-86360 CVSSv3.1: 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Dell System Update, versions prior to 2.3.0.0, contains an Improper…
Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. [...]
Dell heeft de kwetsbaarheden verholpen in Container Storage Modules versie 1.18.0 en hoger. De kwetsbaarheden bevinden zich in Dell Container Storage Modules (CSM), die worden gebruikt voor de integratie van Dell-opslagsystemen met containerplatformen zoals Kubernetes en OpenShift. De geïdentificeerde kwetsbaarheden omvatten onder meer authenticatie- en autorisatiebypasses, privilege-escalatie, informatielekken en kwetsbaarheden in CSM-componenten en CSI-drivers. Afhankelijk van de specifieke…
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-63688, CVE-2026-63692, CVE-2026-67269, CVE-2026-54472, CVE-2026-61421, CVE-2026-67273, CVE-2026-67270, CVE-2026-76105, CVE-2026-61411, CVE-2026-70411, CVE-2026-63689, CVE-2026-63691, CVE-2026-63690, Summary: Dell Container Storage Modules remediation is available for Multiple vulnerabilities in third-party that could be exploited by malicious users to compromise the affected system.…
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments. [...]
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.0, CVEs: CVE-2026-80357, CVE-2026-80359, CVE-2026-80358, Summary: CVE-2026-80357 (CVSS: 7.0): Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to…
Serial Number: AV26-966Date: September 28, 2026 As of September 24, 2026, Dell is affected by vulnerabilities in the following products: Rugged Control Center (RCC) Prior to 5.2.206 Secure Connect Gateway (SCG) Policy Manager Prior to 5.36.00.16 ThinOS 10 Prior to SecurityAddon_2605.10.2766_T10 Dell Trusted Device Client Prior to 8.1.359.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. DSA-2026-410:…
Aggiornamenti di sicurezza Dell risolvono molteplici vulnerabilità, di cui 5 con gravità "alta" nei prodotti Boot Optimized Server Storage (BOSS), Rugged Control Center (RCC), Trusted Device Client e ThinOS 10. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eludere i meccanismi di autenticazione e sicurezza, elevare i propri privilegi e la modifica non autorizzata di dati o codice sui sistemi interessati.
Serial number: AV26-959Date: September 23, 2026 As of September 21, 2026, Dell is affected by vulnerabilities in the following products: Dell Command Powershell Provider (DCPP) Prior to 2.10.2 Dell Command Monitor (DCM) Prior to 10.13.2 Dell Inventory Collector Client Prior to 15.0.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. DSA-2026-379: Security Update for Dell Command | PowerShell Provider …
Serial number: AV26-934Date: September 17, 2026 As of September 17, 2026, Dell is affected by vulnerabilities in the following products: Dell Networking OS10 Prior to 10.6.1.3 Dell OpenManage Server Administrator (OMSA) Multiple versions and models Elastic Cloud Storage (ECS) Prior to 4.4.0.0 ObjectScale Prior to 4.4.0.0 Dell Update Package (DUP) Framework Prior to 26.07.03 Dell Wyse Management Suite Prior to 2605.0.3.683 Dell Repository Manager (DRM) Prior to 3.5.2 The Cyber Centre encourages…
Aggiornamenti di sicurezza Dell Technologies sanano molteplici vulnerabilità, di cui una con gravità "critica" e 11 con gravità "alta", in vari prodotti.
Serial Number: AV26-886Date: September 8, 2026 As of September 7, 2026, Dell is affected by vulnerabilities in the following products: Dell OpenManage Network Integration Prior to 3.10 or later Dell iDRAC9 Versions prior to 7.30.10.50 and 7.00.00.184 Dell iDRAC10 Prior to 1.30.30.50 or later Dell PowerEdge Server for Intel 2026 Multiple versions and models Dell Open Manage Python SDK (omsdk) Prior to 1.2.519 or later Dell Avamar Multiple versions Dell Networker Virtual Edition (NVE) Multiple…
Rilasciati aggiornamenti di sicurezza che sanano numerose vulnerabilità, di cui 3 con gravità "critica" e 34 con gravità "alta" in Dell Secure Connect Gateway, soluzione utilizzata per la gestione e il supporto remoto dei sistemi.
Serial Number: AV26-863Date: August 31, 2026 As of August 28, 2026, Dell is affected by vulnerabilities in the following products: Dell PowerEdge Server for Intel Processor Firmware Multiple versions and models Dell AppSync Prior to or equal to 4.6.0.4 and 4.6.1.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. DSA-2026-356: Security Update for Dell PowerEdge Server for Intel® Processor Firmware…
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2026-70419, CVE-2026-71171, CVE-2026-68865, CVE-2026-71173, CVE-2026-71172, Summary: This Security Advisory applies to Cloud Disaster Recovery versions 20.2 and previous. CVE-2026-70419: Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with…
Aggiornamenti di sicurezza sanano una vulnerabilità con gravità "alta" presente in Dell ThinOS 10. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un attaccante locale con bassi privilegi di ottenere accesso non autorizzato ai sistemi interessati.
Serial Number: AV26-843Date: August 24, 2026 As of August 17, 2026, Dell is affected by vulnerabilities in the following products: Alienware Command Center (AWCC) Prior to 6.14.20.0 Dell Command Update (DCU) Prior to 5.7.1 Dell Cyber Detect OVA Prior to 20.3.0 Dell Networking OS10 Prior to 10.5.6.14 Dell Device Management Agent (DDMA) Prior to 26.06 Dell ThinOS10 Multiple versions and models Metro Node Prior to 4.6.0.4 ObjectScale Prior to 4.3.0.1 OpenManage Enterprise Prior to 4.7.0 PowerPath…
Aggiornamenti di sicurezza Dell sanano molteplici vulnerabilità, di cui 2 con gravità "critica" e 17 con gravità "alta" presenti in PowerStore T, ObjectScale, RecoverPoint for VMs, Alienware Command Center (AWCC), Command Update (DCU) e Watchdog Timer Driver.
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-67262, CVE-2026-70415, CVE-2026-67271, Summary: CVE-2026-67271 9.8 Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB…
Serial Number: AV26-821Date: August 17, 2026 As of August 14, 2026, Dell is affected by vulnerabilities in the following products: PowerFlex appliance Prior to 51.391.02 and 51.384.02 PowerFlex Rack Prior to 3.9.1.2 and 3.8.4.2 PowerFlex Software Prior to 5.1.0.2 and 4.5.6 Dell Client Platform for Multiple AMD BIOS multiple versions and models Dell Client Platform BIOS for 2026.3 IPU multiple versions and models Dell VPlex Prior to 6.2.2.1 The Cyber Centre encourages users and administrators to…
Serial Number: AV26-788Date: August 10, 2026 As of August 7, 2026, Dell is affected by vulnerabilities in the following products: Dell OpenManage Server Administrator Managed Node (Patch) for Windows Prior to 11.1.0.2 Dell OpenManage Server Administrator Managed Node for RHEL 8.10 Prior to 11.1.0.2 Dell OpenManage Server Administrator Managed Node for RHEL 9.4 Prior to 11.1.0.2 Dell OpenManage Server Administrator Managed Node for SLES 15 Prior to 11.1.0.2 OpenManage Server Administrator…