CVE-2026-67266
Received Received - Intake

Dell Command Update Incorrect Authorization Vulnerability

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: Dell

Description
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-67266
EUVD
EUVD-2026-62519

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell command_update to 5.7.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Command Update (DCU) versions before 5.7.1 have an Incorrect Authorization vulnerability. A low-privileged attacker with local access could exploit this to gain higher privileges on the system.

Detection Guidance

To detect this vulnerability, check the installed version of Dell Command Update (DCU). If the version is prior to 5.7.1, the system is vulnerable. Use the command 'dcu --version' on Windows or check the application version in the system's installed programs list.

Impact Analysis

An attacker could use this flaw to escalate their privileges on your system, potentially gaining control over sensitive functions or data. This could lead to unauthorized changes or access.

Compliance Impact

This vulnerability could lead to unauthorized access or privilege escalation, which may violate compliance requirements for data protection and access control in standards like GDPR or HIPAA.

Mitigation Strategies

Immediately update Dell Command Update (DCU) to version 5.7.1 or later. Download the latest version from Dell's official website and install it to patch the Incorrect Authorization vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-67266. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart