CVE-2026-86361

Undergoing Analysis Undergoing Analysis - In Progress

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-14

Assigner: Dell

Description

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-86361

EUVD

EUVD-2026-93790

Affected Vendors & Products

Vendor	Product	Version / Range
dell	system_update	to 2.3.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

Executive Summary

Dell System Update versions before 2.3.0.0 has a flaw where permissions for critical resources are set incorrectly. This allows a low-privileged local attacker to exploit it and gain higher privileges on the system.

Detection Guidance

To detect this vulnerability, check the installed version of Dell System Update on your system. Compare it against version 2.3.0.0 or later. If the version is prior to 2.3.0.0, the system is vulnerable. Use commands like 'dsu --version' or check installed programs via system package managers.

Impact Analysis

An attacker with local access could escalate their privileges, potentially gaining control over the system or accessing sensitive data. This could lead to unauthorized changes or data theft.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements like GDPR or HIPAA. Organizations using affected versions may face legal and regulatory penalties.

Mitigation Strategies

Update Dell System Update to version 2.3.0.0 or later to address the incorrect permission assignment.

Hi! I’m here to help you understand CVE-2026-86361. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70