SecOraLens
CriticalCVE

New Dell System Update flaw lets hackers gain root privileges

BleepingComputer·Source published ·1 min read

What happened?

Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. [...]

Key details

  • Dell System Update (DSU) is the deployment tool for BIOS, firmware, and software on PowerEdge servers.
  • CVE-2026-86360 is the critical path traversal vulnerability in DSU command-line interface.
  • Dell released patches for four additional System Update vulnerabilities on Thursday.
  • CISA and FBI have urged removal of path traversal weaknesses from products before shipping.
  • Dell also patched two maximum-severity Container Storage Module vulnerabilities on the same day.
  • State-backed groups have previously exploited Dell vulnerabilities in attacks.

Affected

  • PowerEdge enterprise server infrastructure running DSU is affected.
  • Container Storage Modules CSM affected by CVE-2026-63688 and CVE-2026-63692.

Fixes and mitigations

  1. Patch two maximum-severity Container Storage Module vulnerabilities CVE-2026-63688 and CVE-2026-63692.

Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.

Back to all advisories