CVE-2026-59914

Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in Dell Display Manager

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: Dell

Description

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-12

Generated

2026-08-13

AI Q&A

2026-08-13

EPSS Evaluated

N/A

NVD

CVE-2026-59914

EUVD

EUVD-2026-57510

Affected Vendors & Products

Vendor	Product	Version / Range
dell	display_and_peripheral_manager	to 2.3.0.17 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

Dell Display and Peripheral Manager (DDPM) for Windows, versions before 2.3.0.17, has an Authentication Bypass by Spoofing vulnerability. This allows a low-privileged attacker with local access to bypass authentication and execute arbitrary code with elevated privileges.

Impact Analysis

An attacker could exploit this to gain higher system access, install malware, steal data, or take control of the affected system. Since it requires local access, physical or network-based access to the device is needed.

Mitigation Strategies

Update Dell Display and Peripheral Manager to version 2.3.0.17 or later to address the Authentication Bypass by Spoofing vulnerability.

Hi! I’m here to help you understand CVE-2026-59914. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70