Dell

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Dell product.

RSS Feeds for Dell security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Dell products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Dell Sorted by Most Security Vulnerabilities since 2018

Dell Secure Connect Gateway167 vulnerabilities

Dell Powerscale Onefs103 vulnerabilities

Dell Wyse Management Suite68 vulnerabilities

Dell Unity Operating Environment45 vulnerabilities

Dell Data Domain Operating System38 vulnerabilities

Dell Smartfabric Os1036 vulnerabilities

Dell Unity30 vulnerabilities

Dell Powerprotect Data Manager28 vulnerabilities

Dell Bsafe Micro Edition Suite28 vulnerabilities

Dell Supportassist For Home Pcs26 vulnerabilities

Dell Command Update23 vulnerabilities

Dell Objectscale23 vulnerabilities

Dell Openmanage Enterprise22 vulnerabilities

Dell Unisphere For Powermax20 vulnerabilities

Dell Alienware Command Center19 vulnerabilities

Dell Supportassist For Business Pcs19 vulnerabilities

Dell Bsafe Crypto C Micro Edition19 vulnerabilities

Dell Bsafe Ssl J19 vulnerabilities

Dell Container Storage Modules18 vulnerabilities

Dell Unisphere Powermax Virtual Appliance18 vulnerabilities

Dell Cloudlink16 vulnerabilities

Dell Solutions Enabler Virtual Appliance15 vulnerabilities

Dell Recoverpoint Virtual Machines14 vulnerabilities

Dell Supportassist13 vulnerabilities

Dell Elastic Cloud Storage13 vulnerabilities

Dell Policy Manager Secure Connect Gateway12 vulnerabilities

Dell Networker11 vulnerabilities

Dell Unity Xt Operating Environment10 vulnerabilities

Dell Bsafe Crypto J10 vulnerabilities

Dell Smartfabric Storage Software10 vulnerabilities

Dell Unityvsa Operating Environment10 vulnerabilities

Dell Insightiq10 vulnerabilities

Dell Networking Os109 vulnerabilities

Dell Appsync8 vulnerabilities

Dell Controlvault38 vulnerabilities

Dell Digital Delivery8 vulnerabilities

Dell Update Package Framework8 vulnerabilities

Dell Repository Manager8 vulnerabilities

Dell Alienware Update7 vulnerabilities

Dell Avamar Server7 vulnerabilities

Dell Storage Manager7 vulnerabilities

Dell System Update7 vulnerabilities

Dell Openmanage Server Administrator7 vulnerabilities

Dell Encryption7 vulnerabilities

Dell Enterprise Sonic Distribution7 vulnerabilities

Dell Idrac97 vulnerabilities

Dell Update6 vulnerabilities

Dell Supportassist Os Recovery6 vulnerabilities

Dell Display Manager6 vulnerabilities

Dell Emc Appsync6 vulnerabilities

Dell Emc Idrac Service Module6 vulnerabilities

Dell Thinos6 vulnerabilities

Dell Peripheral Manager6 vulnerabilities

Dell Endpoint Security Suite Enterprise6 vulnerabilities

Dell Powerstoreos5 vulnerabilities

Dell Command Monitor5 vulnerabilities

Dell Data Lakehouse5 vulnerabilities

Dell Enterprise Sonic Os5 vulnerabilities

Dell Power Manager5 vulnerabilities

Dell Unisphere 3605 vulnerabilities

Dell Command Intel Vpro Out Band4 vulnerabilities

Dell Common Event Enabler4 vulnerabilities

Dell Powerprotect Cyber Recovery4 vulnerabilities

Known Exploited Dell Vulnerabilities

The following Dell vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability	Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access to the underlying operating system and root-level persistence. CVE-2026-22769 Exploit Probability: 13.3%	February 18, 2026
Dell dbutil Driver Insufficient Access Control Vulnerability	Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service, or information disclosure. CVE-2021-21551 Exploit Probability: 79.2%	March 31, 2022

The vulnerability CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability is in the top 1% of the currently known exploitable vulnerabilities. The vulnerability CVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability is in the top 5% of the currently known exploitable vulnerabilities.

By the Year

In 2026 there have been 534 vulnerabilities in Dell with an average score of 6.6 out of ten. Last year, in 2025 Dell had 204 security vulnerabilities published. That is, 330 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.16

Year	Vulnerabilities	Average Score
2026	534	6.61
2025	204	6.77
2024	219	7.07
2023	168	6.96
2022	131	7.20
2021	142	6.95
2020	35	7.45
2019	54	7.36
2018	57	7.21

It may take a day or so for new Dell vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Dell Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-78341	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16 Incorrect Auth (EoP) Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.	Secure Connect Gateway
CVE-2026-78340	Oct 09, 2026	Dell SCG PM Path Trv before 5.34.00.16 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Filesystem access for attacker.	Secure Connect Gateway
CVE-2026-78339	Oct 09, 2026	DL Secure Connect Gateway DM 5.34.00.16: Incorrect Permission on Policy Manager Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.	Secure Connect Gateway
CVE-2026-78027	Oct 09, 2026	Dell SCG Policy Manager SSRF before 5.34.00.16 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.	Secure Connect Gateway
CVE-2026-78026	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16 - Auth Bypass via User-Key Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.	Secure Connect Gateway
CVE-2026-78025	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16: Missing Auth for Critical Function Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.	Secure Connect Gateway
CVE-2026-78024	Oct 09, 2026	Dell Secure Connect Gateway (SCG) Policy Manager SSRF <5.34.00.16 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request forgery, and Unauthorized access.	Secure Connect Gateway
CVE-2026-78023	Oct 09, 2026	Dell SCG Policy Manager Auth ByPass via User Key <5.34.00.16 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.	Secure Connect Gateway
CVE-2026-78022	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16 Failing Open Vulnerability Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.	Secure Connect Gateway
CVE-2026-78021	Oct 09, 2026	Dell SCG PM CVE-2026-78021: Sensitive Error Info Exposure <=5.34.00.16 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.	Secure Connect Gateway
CVE-2026-78020	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16 Improper Cert Validation Remote Exploit Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.	Secure Connect Gateway
CVE-2026-78019	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16: Untrusted Control Sphere,Low-Priv Exploit Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesystem access for attacker, and Remote execution.	Secure Connect Gateway
CVE-2026-78018	Oct 09, 2026	Dell SCG Policy Manager Init Secure Default before 5.34.00.16 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.	Secure Connect Gateway
CVE-2026-78017	Oct 09, 2026	Dell SCG Policy Manager prior 5.34.00.16 Improper Check Vulnerability Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Protection mechanism bypass.	Secure Connect Gateway
CVE-2026-78016	Oct 09, 2026	Dell SCG Policy Manager Improper Input Validation before 5.34.00.16 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure and Information tampering.	Secure Connect Gateway
CVE-2026-78015	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16: Less Trusted Source Vulnerability Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.	Secure Connect Gateway
CVE-2026-78013	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16: Insecure Init Resource Vulnerability Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Protection mechanism bypass.	Secure Connect Gateway
CVE-2026-76779	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16: Auth Attempts Bypass (CVE-2026-76779) Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.	Secure Connect Gateway
CVE-2026-76769	Oct 09, 2026	Dell SCG Policy Manager <5.34.00.16: Missing Auth Priv Esc Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.	Secure Connect Gateway
CVE-2026-82162	Oct 06, 2026	Dell Command \| Configure <5.2.3.35: IHM EoP Vulnerability Dell Command \| Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2026-70414	Oct 06, 2026	Dell Command \| Configure <5.2.3.35 Plaintext Password Storage Dell Command \| Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
CVE-2026-86362	Oct 06, 2026	Dell System Update <2.3.0.0 Improper ACL (EoP) Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.	System Update
CVE-2026-86361	Oct 06, 2026	Dell System Update <2.3.0.0: Incorrect Permission Assignment (EoP) Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.	System Update
CVE-2026-63697	Oct 06, 2026	Dell System Update <2.3.0.0 Improper Cert Validation Remote Exec Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.	System Update
CVE-2026-86360	Oct 06, 2026	Dell System Update 2.3.0.0 Path Traversal to root Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This vulnerability is considered critical because it can be leveraged by an unauthenticated attacker to execute arbitrary code with root privileges. Successful exploitation may allow complete compromise of the vulnerable application and underlying operating system. Dell recommends customers upgrade at the earliest opportunity.	System Update
CVE-2026-71168	Oct 06, 2026	Dell System Update <2.3.0.0 Path Traversal vulnerability Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution.	System Update
CVE-2026-63690	Oct 06, 2026	Dell CS Modules <1.18.0 Missing Auth in csi-powerflex/Powermax/PowerStore Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.	Container Storage Modules
CVE-2026-63691	Oct 06, 2026	Dell CSI Driver for PowerMax csireverseproxy Missing Auth <1.18.0 Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.	Container Storage Modules
CVE-2026-63689	Oct 06, 2026	Dell Container Storage Modules 1.17. Sensitive Info Log Injection Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.	Container Storage Modules
CVE-2026-70411	Oct 06, 2026	Dell CSM <1.18 Unauthenticated gRPC TenantService Attacker Enables Tenant Creation Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags.	Container Storage Modules
CVE-2026-61411	Oct 06, 2026	Dell Container Storage Modules <1.18.0 Log File Sensitive Info Leak Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.	Container Storage Modules
CVE-2026-76105	Oct 06, 2026	Dell CMS <1.18 Insufficiently Random Values Vulnerability (CVE-2026-76105) Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.	Container Storage Modules
CVE-2026-67270	Oct 06, 2026	Dell CSM Proxy-Server Improper Cert Validation before v1.18.0 Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend administrator credentials.	Container Storage Modules
CVE-2026-67273	Oct 06, 2026	Dell Container Storage Mod v1.17+ - Template Engine Neutralization (EoP) Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.	Container Storage Modules
CVE-2026-61421	Oct 06, 2026	Use of Hardcoded Credentials in Dell CSM Auth (v<1.18.0) Elevating Privileges Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.	Container Storage Modules
CVE-2026-54472	Oct 06, 2026	Dell Container Storage Modules <1.18.0 Use of Hard-coded Credentials in csm-docs Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8	Container Storage Modules
CVE-2026-67269	Oct 06, 2026	Dell CSM Operator <1.18.0 Improper Privilege Management CVE-2026-67269 Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.	Container Storage Modules
CVE-2026-63692	Oct 06, 2026	Dell Container Storage Modules <1.18.0: Missing Auth -> Priv Esc Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.	Container Storage Modules
CVE-2026-63688	Oct 06, 2026	Dell CSM <1.18.0 Missing Auth in csm-authorization-storage gRPC Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.	Container Storage Modules
CVE-2026-76114	Sep 29, 2026	Cleartext Transmission Vulnerability in Dell SCG Policy Manager v<5.34.00.16 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.	Secure Connect Gateway
CVE-2026-73599	Sep 29, 2026	Dell SCG <5.34.00.16 - Open Redirect (URL Red.) SSRF Vulnerability Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.	Secure Connect Gateway
CVE-2026-73598	Sep 29, 2026	Dell SCG Policy Manager <=5.34.00.16 - Incorrect Permission Assignment EoP Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.	Secure Connect Gateway
CVE-2026-73597	Sep 29, 2026	Dell SCG Policy Manager <5.34.00.16 CSRF Vulnerability Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, and Protection mechanism bypass.	Secure Connect Gateway
CVE-2026-73596	Sep 29, 2026	Dell SCG Policy Manager <5.34 Insecure Init Allows Elevation Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Information tampering, Protection mechanism bypass, and Unauthorized access.	Secure Connect Gateway
CVE-2026-73595	Sep 29, 2026	Dell SCG Policy Manager <5.36: Code Exec via Download of Code W/O Integrity Check Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Information tampering, and Protection mechanism bypass.	Secure Connect Gateway
CVE-2026-73594	Sep 29, 2026	Dell Secure Connect Gateway Policy Manager <5.34 Improper Certificate Validation Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.	Secure Connect Gateway
CVE-2026-73593	Sep 29, 2026	Dell SCG Policy Manager (<5.34.00.16) Active Debug Code Info Disclosure Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.	Secure Connect Gateway
CVE-2026-70413	Sep 28, 2026	Dell Live Optics Collector <27.2.13.310: Hardcoded PW RCE, Info Exposure Dell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
CVE-2026-80359	Sep 28, 2026	Dell BOSS 17G N1: OTDI Improper Access Control (before 2.2.13.2038) Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-80358	Sep 28, 2026	Physical Access via ODBC on Dell BOSS SMCU (pre-2.2.13.2038) Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.