CVE Catalog

CVE-2026-67267

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Summary

Dell Command Update (DCU) versions prior to 5.7.1 contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Risk Assessment

An attacker could gain access to sensitive system information, which could aid in further attacks or compromise data confidentiality.

Recommendation

Update Dell Command Update to version 5.7.1 or later, which includes fixes for the vulnerability. Restrict local access to the system for unauthorized users.

Original NVD description (English source)

Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS