Dell security advisory (AV26-959)
Canadian Cyber Centre flags credential theft, weak permissions, and unquoted paths in Dell management tools.
Canadian Cyber Centre advisory AV26-959, dated September 23, 2026, covers multiple Dell management-tool flaws reported as of September 21. Dell Command PowerShell Provider before 2.10.2 is affected by credential theft via the PowerShell event log, and Dell Command Monitor before 10.13.2 has an incorrect permission assignment. A separate unquoted search path issue affects Dell SupportAssist, Dell Optimizer, Dell Trusted Device, and Dell Command Update; Dell Inventory Collector before 15.0.0 is also listed. No CVE IDs or active exploitation are stated.
- DCPP before 2.10.2 can expose credentials through PowerShell event logs.
- Dell Command Monitor before 10.13.2 assigns incorrect permissions to a critical resource.
- SupportAssist, Optimizer, Trusted Device, and Command Update have unquoted paths.
- Advisory AV26-959 cites Dell DSA-2026-379, DSA-2026-380, and DSA-2026-381.
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-959 Date: September 23, 2026 As of September 21, 2026, Dell is affected by vulnerabilities in the following products: Dell Command Powershell Provider (DCPP) Prior to 2. 10. 2 Dell Command Monitor (DCM) Prior to 10.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.