EUVD-2026-39355
GHSA-h665-2rjq-27v4
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V12 - Secure Communication Certificate validation
|
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv3 – Jun 29, 2026
Protection mechanism bypass in Dell Display and Peripheral Manager for Mac (versions prior to 2.3) stems from improper certificate validation, allowing a low-privileged local user to defeat a security control the application relies on. Dell self-reported the issue and there is no public exploit identified at time of analysis; EPSS is very low (0.07%) and CISA SSVC marks exploitation status as 'none', though technical impact is rated 'total'. The flaw affects the macOS build of DDPM, a companion utility for Dell monitors and peripherals.
Earlier versions of this analysis (2)
Protection mechanism bypass in Dell Display and Peripheral Manager for Mac (versions prior to 2.3) stems from improper TLS/certificate validation (CWE-295), allowing a low-privileged local attacker to defeat a security control the application relies on. Dell-reported and tracked as DSA-2026-267/EUVD-2026-39355, it carries a CVSS 7.8 (High) with full confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis, EPSS is negligible (0.07%), and CISA SSVC marks exploitation status as none.
Improper certificate validation in Dell Display and Peripheral Manager (DDPM) for macOS versions prior to 2.3 allows a low-privileged local attacker to bypass a security protection mechanism (CWE-295), with high impact to confidentiality, integrity, and availability. Because the software fails to properly verify certificates, an attacker positioned to influence the validated channel (e.g., a malicious update or peripheral communication endpoint) can defeat trust controls once a user performs a required interaction. This is rated CVSS 7.3 (High); there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Know when Display And Peripheral Manager gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Dell scopes this to local access with low privileges and required user interaction; the certificate-validation bypass enables acceptance of malicious content, justifying high C/I/A.
Primary rating from Vendor (dell).
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Executive ViewAI
Dell Display and Peripheral Manager for Mac (versions prior to 2.3) contains an improper certificate validation flaw allowing low-privileged local users to bypass intended security controls. While no public exploit exists and exploitation probability is minimal (0.1% EPSS), organizations with DDPM deployed on macOS endpoints should prepare remediation plans as the vendor works toward a patch.
Within 24 hours: Identify all macOS systems running DDPM versions prior to 2.3 and assess business criticality of each installation. Within 7 days: Apply principle of least privilege to restrict local user account rights on affected systems; disable or uninstall DDPM if operationally unnecessary. Within 30 days: Monitor Dell's security advisory channel for version 2.3 or later availability and plan immediate deployment upon release; test patch in non-production environment first.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict local user privileges to limit attack surface; (2) Disable DDPM auto-startup if not actively required; (3) Remove administrative privileges from user accounts; (4) Uninstall DDPM entirely if functionality is not business-critical to reduce attack surface.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
OS command injection in Dell Display and Peripheral Manager (DDPM) for macOS, all versions prior to 2.3, allows a low-pr
Local privilege escalation to code execution affects Dell Display and Peripheral Manager (DDPM) for Windows in all versi
Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. Rated high
Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulne
Local privilege escalation in Dell Display and Peripheral Manager (DDPM) for Mac, versions prior to 2.3, lets a low-priv
Exploit-DB