CVE-2026-86359

HighCVSS 8.5

Published: 16/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Summary

Dell Repository Manager versions prior to 3.5.2 contain an Incorrect Default Permissions vulnerability. A low-privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Risk Assessment

A low-privileged attacker could gain higher privileges, potentially taking control of the system or data. The risk is significant in environments with broad remote access.

Recommendation

Upgrade Dell Repository Manager to version 3.5.2 or later. Additionally, review and tighten default permissions in the system configuration.

Other vulnerabilities in Dell Repository Manager

CVE-2025-45376High
Dell Repository Manager (DRM) versions 3.4.7 and 3.4.8 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability, allowing a low privileged attacker with local access to elevate privileges.

Original NVD description (English source)

Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS