Uncontrolled Search Path Element Vulnerability in Dell Server Update Utility
CVE-2026-56795

8.2HIGH

Key Information:

Vendor

Dell
Status
Driver Pack For Windows Os
Driver Pack For Linux Os
Server Update Utility, Windows 64-bit Format
Server Update Utility, Linux 64-bit Format
Vendor
CVE Published:
17 September 2026

What is CVE-2026-56795?

The Dell Server Update Utility has a vulnerability where an attacker with low privileges and local access could manipulate the environment, allowing for potential code execution. Targeted security measures are recommended for users operating versions prior to 26.07.01 to mitigate risks associated with this vulnerability.

Affected Version(s)

Driver Pack For Linux OS 0 < 26.07.01

Driver Pack For Windows OS 0 < 26.07.01

Server Update Utility, Linux 64-bit format 0 < 26.07.01

References

https://www.dell.com/support/kbdoc/en-us/000509930/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.