EUVD-2026-62521
GHSA-cjq3-rjjf-q2pv
Severity by source
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Local access with low-privilege account is the entry point; missing authorization allows scope escape to OS-level resources, warranting S:C and full C/I/A impact.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
AnalysisAI
Privilege escalation in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to gain elevated system access by exploiting missing authorization checks. The vulnerability carries a CVSS 3.1 score of 8.8 with a scope change (S:C), indicating the privilege escalation extends beyond the DCU process itself - likely to OS-level or other system components. No public exploit or CISA KEV listing has been identified at time of analysis, but the low attack complexity (AC:L) and absence of required user interaction make this straightforward to exploit for any user with a local account.
Technical ContextAI
Dell Command Update (DCU) is a Windows-based utility pre-installed on Dell consumer and commercial PCs that automates driver, BIOS, and firmware updates. It operates with elevated system privileges to perform hardware-level updates. The root cause is CWE-862 (Missing Authorization): the application fails to enforce authorization checks before performing sensitive privileged operations, allowing a caller with only low OS-level privileges to trigger those operations without the required permission gate. The CPE cpe:2.3:a:dell:dell_command_update_(dcu):* confirms the affected component is the DCU application itself across all platforms where it is installed. The CVSS scope change (S:C) indicates that when exploited, the impact escapes the DCU process boundary - consistent with a local privilege escalation that grants attacker control over the underlying operating system or system-level resources.
RemediationAI
Upgrade Dell Command Update (DCU) to version 5.7.1 or later, as specified in Dell advisory DSA-2026-309 at https://www.dell.com/support/kbdoc/en-us/000501378/dsa-2026-309-security-update-for-dell-command-update-for-multiple-vulnerabilities. DCU can typically be updated via the application itself or through Dell's enterprise management tools (e.g., Dell Command | Monitor, SCCM integration). If immediate patching is not possible, restrict local user account permissions on affected Dell endpoints to the minimum necessary and audit which users have interactive logon rights to systems running DCU. As a compensating control, application control policies (e.g., AppLocker or Windows Defender Application Control) can be used to restrict execution of DCU binaries to authorized administrator accounts only - though this may disrupt automated update workflows and requires testing before deployment.
More in Dell Command Update Dcu
View allElevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 enables a low-privileged local attacker to f
Elevation of privilege via deserialization of untrusted data affects Dell Command Update (DCU) versions prior to 5.7.1 o
Incorrect Default Permissions in Dell Command Update (DCU) exposes a local privilege escalation path on all versions pri
Elevation of privileges in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a low-privileged local att
Missing Authorization in Dell Command Update (DCU) versions prior to 5.7.1 permits a low-privileged local user to invoke
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a local low-privileged atta
Local privilege escalation in Dell Command Update (DCU) versions prior to 5.7.1 allows a low-privileged local attacker t
XML External Entity injection in Dell Command Update (DCU) versions prior to 5.7.1 enables a local attacker with low-pri
Dell Command Update (DCU) versions prior to 5.7.1 expose sensitive system information to low-privileged local users, con
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to ga
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today