【Vulnerability Alert】High-risk security vulnerability (CVE-2026-86360) exists in Dell System Update, please verify and respond promptly

• Subject:【Vulnerability Alert】High-risk security vulnerability (CVE-2026-86360) exists in Dell System Update, please verify and respond promptly

• Description:
  • NISAC-200-202610-00000012
  • Researchers have discovered a path traversal vulnerability (CVE-2026-86360) in Dell System Update. An unauthenticated remote attacker can exploit this vulnerability to access the file system, and further execute arbitrary code with root privileges. Please verify and respond promptly.
• Affected Platforms:
  • Dell System Update versions earlier than 2.3.0.0 (excluding 2.3.0.0)
• Recommended Actions:
  • The vendor has released a patch or update for the vulnerability. Please refer to the official documentation to respond. The URL is as follows: https://www.dell.com/support/kbdoc/en-us/000515843/dsa-2026-324-security-update-for-dell-system-update-dsu-vulnerabilities
• References:
  1. https://nvd.nist.gov/vuln/detail/CVE-2026-86360
  2. https://www.dell.com/support/kbdoc/en-us/000515843/dsa-2026-324-security-update-for-dell-system-update-dsu-vulnerabilities

Computer and Communication Center
Network System Division