PatchTheCVEsystem update vulnerabilities and fixes
Recent CVEs affecting system update, with upgrade or downgrade steps. 5 tracked.
Also searched as: systemupdate.
system update has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-10-06. Highest priority: CVE-2026-86360 (score 46/100).
- CVE-2026-86361 HIGH 8.2 UPGRADE Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resour
- CVE-2026-86362 HIGH 8.2 UPGRADE Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability
- CVE-2026-63697 HIGH 7.6 UPGRADE Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability
- CVE-2026-71168 HIGH 7.3 UPGRADE Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted D
- CVE-2026-86360 CRITICAL 9.6 UPGRADE Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted D
FAQ
How do I fix system update vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is system update being exploited right now?
None of the tracked system update CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which system update CVE should I patch first?
CVE-2026-86360 currently ranks highest (46/100): Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted D.