Dell TechnologiesCVE-2026-71179

Dell Technologies Update Package Framework: command injection

CVE-2026-71179 · Published Sep 16, 2026 · updated Sep 21, 2026

High7.3

Fix: upgrade to 26.07.03 or later or later

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected versions

Package	Affected	Fixed in
Update Package Framework Product	< 26.07.03 or later	26.07.03 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-78

More Dell Technologies advisories

All Dell Technologies

Medium 6.5Sep 16

Dell Technologies Update Package Framework: stack buffer overflowCVE-2026-86358fixed in 26.07.03 or later High 8.5Sep 16

Dell Technologies Repository Manager: insecure permissionsCVE-2026-86359fixed in 3.5.2 or later High 8.2Sep 16

Dell Update Package FrameworkCVE-2026-71180fixed in 26.07.03 or later Low 3.0Sep 16

Dell Technologies Update Package Framework: link followingCVE-2026-71181fixed in 26.07.03 or later Low 3.0Sep 16

Dell Technologies Update Package Framework: link followingCVE-2026-71182fixed in 26.07.03 or later Medium 5.5Sep 16

Dell Technologies ObjectScale: insecure permissionsCVE-2026-76104fixed in 4.4.0.0 or later