OS Command Injection Vulnerability in Dell Update Package Framework
CVE-2026-71179

7.3HIGH

Key Information:

Vendor

Dell
Status
Update Package Framework
Vendor
CVE Published:
16 September 2026

What is CVE-2026-71179?

The Dell Update Package Framework, specifically in versions before 26.07.03, contains a vulnerability that allows for improper neutralization of special elements utilized in OS commands. This flaw can be exploited by attackers with low privileges who gain local access, potentially enabling them to elevate their privileges within the system. It is essential for users to update to the latest version to mitigate this risk.

Affected Version(s)

Update Package Framework 0 < 26.07.03 or later

References

https://www.dell.com/support/kbdoc/en-us/000509455/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.