CVE-2026-82162: CWE-175: Improper Handling of Mixed Encoding in Dell Command | Configure (DCC)

CVE-2026-82162 describes an improper handling of mixed encoding vulnerability in Dell Command | Configure (DCC) software. This vulnerability allows an unauthenticated attacker with remote access to potentially elevate privileges on the affected system. The issue affects all versions prior to 5.2.3.35. The CVSS 3.1 base score is 7.4, with vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, indicating network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high impact on confidentiality and integrity but no impact on availability. No known exploits in the wild or vendor patch information are provided.

An unauthenticated remote attacker could exploit this vulnerability to gain elevated privileges on the affected system. This could lead to unauthorized access to sensitive information and modification of system data. The confidentiality and integrity impacts are high, but availability is not affected. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Dell's security advisories for updates and apply any released patches promptly. Until a fix is available, restrict remote access to the affected software and apply network-level controls to limit exposure.