Advisoriesby IbisDell TechnologiesCVE-2026-56795
Dell Technologies Driver Pack For Linux OS: code execution
Fix: upgrade to Driver Pack For Windows OS 26.07.01 or later (4 fixed versions below)
Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Driver Pack For Linux OS Product | < 26.07.01 | 26.07.01 |
| Driver Pack For Windows OS Product | < 26.07.01 | 26.07.01 |
| Server Update Utility, Linux 64-bit format Product | < 26.07.01 | 26.07.01 |
| Server Update Utility, Windows 64-bit format Product | < 26.07.01 | 26.07.01 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-427