Dell vulnerabilities and fixes

CVEs that mention Dell, ranked by priority. 19 tracked.

Dell has 19 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 16. Most recent: 2026-08-18. Highest priority: CVE-2026-67261 (score 63/100).

• CVE-2026-67261 CRITICAL 9.8 UPGRADE Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Comma
• CVE-2026-54489 CRITICAL 9.1 UPGRADE Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive
• CVE-2026-40712 CRITICAL 9.1 UPGRADE Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerabil
• CVE-2026-46738 CRITICAL 9.1 UPGRADE Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerabil
• CVE-2026-49499 HIGH 8.8 UPGRADE Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Toke
• CVE-2026-40714 HIGH 7.2 UPGRADE Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerabil
• CVE-2026-46737 MEDIUM 6.7 UPGRADE Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerabil
• CVE-2026-61407 HIGH 8.8 Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control
• CVE-2026-46731 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypa
• CVE-2026-59913 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication
• CVE-2026-59914 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypa
• CVE-2026-59912 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Contr
• CVE-2026-59916 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Contro
• CVE-2026-59917 HIGH 7.8 UPGRADE Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Contro
• CVE-2026-64993 MEDIUM 6.8 UPGRADE Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collect
• CVE-2026-59915 HIGH 7.3 Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnera
• CVE-2026-40717 MEDIUM 6.6 DOWNGRADE Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following
• CVE-2026-44276 MEDIUM 6.0 UPGRADE Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to
• CVE-2026-49500 MEDIUM 6.0 Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before

FAQ

How do I fix Dell vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Dell being exploited right now?

None of the tracked Dell CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Dell CVE should I patch first?

CVE-2026-67261 currently ranks highest (63/100): Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Comma.

← Back to latest CVEs