CVE-2026-23857

Published: Feb 12, 2026Modified: Jun 17, 2026

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: security_alert@emc.com (Secondary)

Description

Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected (1)

Products: Dell: Update Package Framework

1 product

Update Package Framework

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Update Package Framework	From 23.12.00 to 25.02.00

Related CWEs

Improper Handling of Insufficient Permissions or Privileges

The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.

References (1)

https://www.dell.com/support/kbdoc/en-us/000426781/dsa-2026-081-security-update-for-dell-update-package-dup-framework-vulnerability

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.