What is the CVSS score of CVE-2026-24502?

CVE-2026-24502 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dell are affected by CVE-2026-24502?

Intel vPro Out Of Band versions up to 4.7.0 contain a critical privilege escalation vulnerability (CVE-2026-24502) that allows attackers to execute arbitrary commands through uncontrolled search path…

How to fix or mitigate CVE-2026-24502?

Within 24 hours: Inventory all systems running Intel vPro Out Of Band up to version 4.7.0 and isolate affected devices from production networks where possible. Within 7 days: Implement application whitelisting and restrict executable paths on affected systems; disable vPro Out Of Band functionality if not business-critical. Within 30 days: Monitor Intel security advisories for patch availability and establish a deployment plan; conduct vulnerability reassessment post-patching.

Dell CVE-2026-24502

HIGH

Uncontrolled Search Path Element (CWE-427)

2026-03-03 security_alert@emc.com

Privilege Escalation Dell

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

CVE Published

Mar 03, 2026 - 21:15 nvd

HIGH 8.8

DescriptionCVE.org

Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

AnalysisAI

Command \| Intel Vpro Out Of Band versions up to 4.7.0 is affected by uncontrolled search path element (CVSS 8.8).

Technical ContextAI

This vulnerability (CWE-427: Uncontrolled Search Path Element) affects Command \| Intel Vpro Out Of Band. Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.