Dell has released a patch for its Dell System Update (DSU) software, version 2.3.0.0, to address a critical vulnerability. The highest-rated CVE-2026-86360 involves a full system privilege escalation in DSU versions prior to the latest update. This issue arises from an improper limitation of a pathname leading to a restricted directory, allowing potential attackers to execute code with root privileges.\n\nAn unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access.
Successful exploitation may allow complete compromise of the vulnerable application and underlying operating system. Dell recommends customers upgrade at the earliest opportunity.\n\nFor IT administrators running DSU on Dell Power Edge systems, an immediate update is necessary, as any internet-connected equipment is now vulnerable to attacks. Regular software updates are essential for server infrastructure management and overall organization security.
Check Dell's website for more details about the remaining vulnerabilities that have been patched.
Source: TechPowerUp News · Summarized by HeadlinesBriefing