Description
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.
CVSS 6.5EPSS 0.10300000000000001%Risk 0.66
View source- Published
- 2026-08-19 15:17:51
- Affected versions
- <5.7.1
- Type
- Other
- Last modified
- 2026-08-21 13:40:30
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N