Dell flaws affect Alienware Command Center and Wyse Management Suite
Canada's Cyber Centre urges admins to apply Dell updates for builds before 6.14.54.0 and 2609.0.0.155.
Stories per day · 30 days
3 RSS
Relatedstaples4callback-scam2dkim2dmarc2phishing2advisory1alienware1broadcom1callback-phishing1canada1cisco-talos1container-storage1dma1docking-station1email-authentication1firmware1migration1openmanage1
26 stories, newest first · one card per story
Stories tagged #dell
Dell security advisory for PowerProtect Data Domain and OpenManage Enterprise
Vulnerabilities in OpenManage Enterprise prior to 4.8.0 and multiple PowerProtect Data Domain versions prior to 7.13.1.90, 8.3.1.50, 8.6.1.30, and 8.9.0.0.
Talos finds 1,400 scam emails via Staples and Dell orders
Attackers put phone-support lures in order fields so authenticated retailer mail urged victims to call attacker numbers.
1
Scammers hide callback numbers in real Dell and Staples order emails
Cisco Talos saw about 1,400 messages whose DKIM and DMARC checks still passed.
1
Scammers plant fake support numbers in real Dell and Staples emails
Cisco Talos linked about 1,400 messages in two campaigns that pass DKIM and DMARC because retailers send them.
Attackers hide scam helplines in Staples and Dell order emails
Cisco Talos saw about 1,400 messages whose DKIM and DMARC checks passed while pushing victims to call.
1
Dock update tools and firmware had local flaws lockdown can strand
Four local CVEs hit Dell and Lenovo dock updaters or firmware; the post claims no exploitation.
1
Topgolf saved over $11.3M after leaving VMware
Topgolf reports more than $11.3 million saved after migrating from VMware to VergeOS.
Dell security advisory (AV26-1027)
Canada's Cyber Centre urges updates for five Dell management products affected by vulnerabilities.
Microsoft releases new Nvidia-chip AI PCs with revamped Windows 11
Microsoft unveiled Nvidia RTX Spark Surface AI PCs and Windows 11 containers that sandbox AI agents.
Critical Dell System Update Tool Vulnerability Allows Attackers to Execute Code as Root User
Dell patched five System Update flaws, including CVSS 9.6 path traversal that can execute code as root.
Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes
Dell patched 18 critical CSM and DSU flaws, including two CVSS 10 authentication bypasses, with no known exploitation.
New Dell System Update flaw lets hackers gain root privileges
Dell warns a critical System Update path-traversal flaw, CVE-2026-86360, lets unauthenticated attackers run code as root.
Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control
Dell patched multiple critical Container Storage Module flaws, including two CVSS 10.0 bugs that let unauthenticated attackers seize administrative control.
8
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Dell patched six critical Container Storage Modules flaws, including two unauthenticated CVSS 10.0 bugs.
Dell asks admins to patch max severity CSM flaws as soon as possible
Dell patched six critical Container Storage Modules flaws that let unauthenticated attackers gain admin control of enterprise storage.
Dell security advisory (AV26-966)
Canadian Cyber Centre flags Dell flaws in RCC, Secure Connect Gateway, ThinOS 10, and Trusted Device Client.
Dell security advisory (AV26-959)
Canadian Cyber Centre flags credential theft, weak permissions, and unquoted paths in Dell management tools.
VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass
CERT warns vendor-signed UEFI shells from Acer, Dell, and others can bypass Secure Boot.
2
Dell security advisory (AV26-934)
Canadian Cyber Centre relays Dell advisories covering vulnerabilities in Networking OS10, OpenManage Server Administrator, ECS, ObjectScale, DUP, Wyse Management Suite, and Repository Manager.
Critical Dell ObjectScale Vulnerabilities Allows Malicious Users to Compromise the Affected system
Dell's DSA-2026-393 fixes ObjectScale/ECS flaws including unauthenticated deserialization RCE CVE-2026-70416 rated CVSS 10.0.
5
Dell Secure Connect Gateway Vulnerabilities Allow Hackers to Gain Unauthorized Access
Dell patches three critical flaws (CVSS up to 9.8) in Secure Connect Gateway 5.0 enabling admin token replay, unauthenticated RCE, and root escalation.
3
Dell security advisory (AV26-886)
Canada's Cyber Centre flags September 2026 Dell vulnerabilities across iDRAC9/iDRAC10, OpenManage, PowerEdge, Avamar, NetWorker VE, PowerProtect, IDPA and PowerScale OneFS.
Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access
Dell patched three critical Secure Connect Gateway flaws (CVE-2026-80172 up to CVSS 9.8) enabling unauthenticated admin access, remote code execution, and host takeover.
2