CVE-2026-86358
MediumCVSS 6.5Summary
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.
Risk Assessment
An attacker on the same network can remotely execute arbitrary code on the vulnerable system, potentially leading to full takeover of the device. This poses a critical threat to the security of workstations and servers.
Recommendation
Immediately update Dell Update Package Framework to version 26.07.03 or later. Until the update is applied, restrict network access to vulnerable systems and implement network segmentation.
Other vulnerabilities in Dell Update Package Framework
See all- CVE-2026-71182Low
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
- CVE-2026-71181Low
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to filesystem access for the attacker.
- CVE-2026-71180High
Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
- CVE-2026-71179High
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Original NVD description (English source)
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution.