New Dell System Update flaw lets hackers gain root privileges

CVE v události 5

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.6.

Tahle CVE jsem vytáhl z širšího textu článku: CVE-2021-21551, CVE-2026-22769, CVE-2026-63688, CVE-2026-63692. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.

Jak se o tom psalo 3

1. 7. 10. 2026 · zachyceno 04:00 · NCSC-FI FI

   DSA-2026-324: Security update for Dell System Update (DSU) Vulnerabilities

   Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-63697, CVE-2026-86360, CVE-2026-86361, CVE-2026-86362, CVE-2026-71168, Summary: Dell System Update (DSU) remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system. CVE-2026-86360 CVSSv3.1: 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Dell System Update, versions prior to 2.3.0.0, contains an Improper…

2. 6. 10. 2026 15:32 · CSIRT Itálie (ACN) IT

   Rilevate vulnerabilità in Dell System Update

   Aggiornamenti di sicurezza Dell Technologies sanano 5 vulnerabilità, di cui una con gravità "critica" e 4 con gravità "alta", in Dell System Update, software per la gestione degli aggiornamenti per driver, BIOS, firmware e applicazioni.

3. 5. 10. 2026 16:53 · BleepingComputer US nadpis události

   New Dell System Update flaw lets hackers gain root privileges

   Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. [...]