Threat Intel

v0.1

← CVEs

CVE-2026-23857

HIGH 8.2
Published
2026-02-12
Last Modified
2026-02-18
Affected Apps
3
Affected Devices
6
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected Applications in Environment 3
SupportAssist OS Recovery v5.5.15.
3 devices
SupportAssist OS Recovery v5.5.14.
1 device
SupportAssist OS Recovery v5.5.12.
2 devices
Affected Devices 6
ARSUTLGU4FRRGEO Windows DPHSOB-F3ZFQV3 Windows DPLIBR-8KQ4284 Windows DPVPRS-9ZXCHR2 Windows DPZEAT-CSRXRF4 Windows DPZECO-DLH0X54 Windows
References 1