CVE Program partner
dell
Dell
CVEs, 365 days5802,621 all time, 156 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Dell |
| Role | CNA |
| Type | Vendor |
| Reports to | mitre |
| Scope | Dell, Dell EMC, and VCE issues only. |
| Advisories | https://www.dell.com/support/security/en-us |
Latest CVEs · RSS
- CVE-2026-81452 2026-10-16 · CVSS 7.0Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local acces
- CVE-2026-82153 2026-10-14 · CVSS 2.2Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical acc
- CVE-2026-91883 2026-10-14 · CVSS 4.3Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider config
- CVE-2026-91882 2026-10-14 · CVSS 8.6Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulne
- CVE-2026-91881 2026-10-14 · CVSS 9.0Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unau
- CVE-2026-76113 2026-10-14 · CVSS 4.3Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the r
- CVE-2026-35161 2026-10-14 · CVSS 5.3Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker wit
- CVE-2026-94348 2026-10-14 · CVSS 6.1Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulner
- CVE-2026-101215 2026-10-14 · CVSS 6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') v
- CVE-2026-101217 2026-10-14 · CVSS 6.5Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability
- CVE-2026-101216 2026-10-14 · CVSS 6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerab
- CVE-2026-78341 2026-10-09 · CVSS 6.5Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker wi
- CVE-2026-78340 2026-10-09 · CVSS 6.3Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path T
- CVE-2026-78339 2026-10-09 · CVSS 6.3Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability.
- CVE-2026-78027 2026-10-09 · CVSS 5.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged a
- CVE-2026-78026 2026-10-09 · CVSS 4.3Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A lo
- CVE-2026-78025 2026-10-09 · CVSS 7.5Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauth
- CVE-2026-78024 2026-10-09 · CVSS 7.7Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged a
- CVE-2026-78023 2026-10-09 · CVSS 7.1Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A lo
- CVE-2026-78022 2026-10-09 · CVSS 6.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged
- CVE-2026-78021 2026-10-09 · CVSS 3.7Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerab
- CVE-2026-78020 2026-10-09 · CVSS 7.5Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated at
- CVE-2026-78019 2026-10-09 · CVSS 7.5Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerabili
- CVE-2026-78018 2026-10-09 · CVSS 6.3Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability.
- CVE-2026-78017 2026-10-09 · CVSS 3.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability.