Threat Intelligence Database

CVE-2026-71180 is a vulnerability in Dell Update Package Framework versions prior to 26.07.03 involving an unchecked return value. This flaw allows a low privileged local attacker to potentially elevate their privileges. The vulnerability has a high severity with a CVSS score of 8.2, indicating significant impact on confidentiality, integrity, and availability.

Dell Update Package Framework versions prior to 26.07.03 contain an OS Command Injection vulnerability (CWE-78). This flaw allows a low privileged local attacker to execute arbitrary OS commands, potentially leading to elevation of privileges. The vulnerability is rated high severity with a CVSS score of 7.3. No official patch link is provided in the data, and the vendor advisory status is not confirmed. Exploits are not known to be active in the wild.

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Dell ObjectScale versions prior to 4.4.0.0 contain an improper authentication vulnerability (CWE-287). This flaw allows an unauthenticated remote attacker to potentially gain unauthorized access to the system. The vulnerability is rated high severity with a CVSS score of 8.1, indicating significant impact on confidentiality, integrity, and availability.

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Dell Wyse Management Suite versions prior to 2605.0.3.683 contain a vulnerability due to a missing cryptographic step. This flaw could be exploited by a high privileged attacker with remote access to tamper with information. The vulnerability is identified as CWE-325 and has a high severity rating with a CVSS score of 8. No patch or remediation details are provided in the input data.

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Dell Wyse Management Suite versions prior to 2605.0.3.683 contain a vulnerability allowing unrestricted upload of files with dangerous types. This flaw could be exploited remotely by an unauthenticated attacker, potentially leading to remote code execution. The vulnerability is identified as CWE-434 and carries a high severity with a CVSS score of 8.6.

Dell SmartFabric OS10 Software versions prior to 10.6.1.3 have a vulnerability where code is downloaded without an integrity check. This flaw could allow a high privileged remote attacker to execute arbitrary code. The vulnerability is identified as CWE-494 and has a critical severity rating with a CVSS score of 9.1.

Dell SmartFabric OS10 Software versions prior to 10.6.1.3 contain a session fixation vulnerability that allows an unauthenticated remote attacker to potentially hijack user sessions. This vulnerability is categorized as improper access control (CWE-284) and has a critical severity with a CVSS score of 9.8. Exploitation could lead to full confidentiality, integrity, and availability compromise of the affected system.

A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micro_client.cpp. Executing a manipulation of the argument DataLen can lead to memory corruption. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Dell ThinOS 10 versions prior to 2605_10.2616 have an improper access control vulnerability (CWE-284) that could allow an unauthenticated remote attacker to execute arbitrary code within the application context. This vulnerability is classified as critical with a CVSS score of 9.4.

Dell ThinOS 10 versions prior to 2605_10.2616 contain an OS Command Injection vulnerability (CWE-78). This flaw allows a high privileged attacker with remote access to execute arbitrary commands on the affected system. The vulnerability is critical with a CVSS score of 9.1, indicating high impact on confidentiality, integrity, and availability. No explicit patch link is provided, and the affected versions are all versions before 2605_10.2616. There are no known exploits in the wild at this time.

Dell ThinOS 10 versions prior to 2605_10.2616 contain an OS Command Injection vulnerability (CWE-78) that allows unauthenticated remote attackers to execute arbitrary commands. This critical vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.