← Back

CVE-2026-67268

nvd nist
Published: Aug 19, 2026Modified: Aug 21, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Exploitability: 2.0 / Impact: 4.0
Source: security_alert@emc.com (Secondary)

Description

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.

Affected (1)

Products: Dell: Command Update
Dell
1 product
Command Update
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Command Update
Before 5.7.1

Related CWEs

CWE-611
Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.