【Vulnerability Alert】Dell System Update Has a High-Risk Security Vulnerability (CVE-2026-86360). Please Verify and Take Action as Soon as Possible

publish date : 2026-10-22 update date : 2026-10-22

Source: Ministry of education information & communication security contingency platform


Publication Number	TACERT-ANA-2026101904103939	Publication Time	2026-10-19 16:02:45
Incident Type	ANA-Vulnerability Alert	Discovery Time	2026-10-19 16:02:45
Impact Level	Medium
[Subject] 【Vulnerability Alert】Dell System Update Has a High-Risk Security Vulnerability (CVE-2026-86360). Please Verify and Take Action as Soon as Possible
[Content] NISAC-200-202610-00000012 Researchers have discovered a Path Traversal vulnerability (CVE-2026-86360) in Dell System Update. An unauthenticated remote attacker can exploit this vulnerability to access the file system and subsequently execute arbitrary code with root privileges. Please verify and take action as soon as possible.
[Affected Platform] Dell System Update versions earlier than 2.3.0.0 (excluding version 2.3.0.0)
[Recommended Actions] The vendor has released patches or updates to address this vulnerability. Please refer to the official instructions for remediation. The URL is as follows: https://www.dell.com/support/kbdoc/en-us/000515843/dsa-2026-324-security-update-for-dell-system-update-dsu-vulnerabilities
[Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2026-86360 2. https://www.dell.com/support/kbdoc/en-us/000515843/dsa-2026-324-security-update-for-dell-system-update-dsu-vulnerabilities

(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw

Organizer: Computer Center

Click Num:

Share