What is the CVSS score of EUVD-2026-39355?

EUVD-2026-39355 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Display And Peripheral Manager are affected by EUVD-2026-39355?

Dell Display and Peripheral Manager for Mac (versions prior to 2.3) contains an improper certificate validation flaw allowing low-privileged local users to bypass intended security controls.

How to fix or mitigate EUVD-2026-39355?

Within 24 hours: Identify all macOS systems running DDPM versions prior to 2.3 and assess business criticality of each installation. Within 7 days: Apply principle of least privilege to restrict local user account rights on affected systems; disable or uninstall DDPM if operationally unnecessary. Within 30 days: Monitor Dell's security advisory channel for version 2.3 or later availability and plan immediate deployment upon release; test patch in non-production environment first.

Display And Peripheral Manager EUVD-2026-39355

| CVE-2026-46734 HIGH

Improper Certificate Validation (CWE-295)

2026-06-25 dell

GHSA-h665-2rjq-27v4

Authentication Bypass Dell Display And Peripheral Manager

7.8

CVSS 3.1 · NVD

Severity by source

Vendor (dell) PRIMARY

HIGH

qualitative

NVD

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.3 HIGH

Dell scopes this to local access with low privileges and required user interaction; the certificate-validation bypass enables acceptance of malicious content, justifying high C/I/A.

3.1 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Jun 29, 2026 - 23:58 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 29, 2026 - 23:58 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 29, 2026 - 23:52 vuln.today

cvss_changed

CVSS changed

Jun 29, 2026 - 23:52 NVD

7.3 (HIGH) 7.8 (HIGH)

Analysis Generated

Jun 25, 2026 - 14:33 vuln.today

DescriptionNVD

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

AnalysisAI

Protection mechanism bypass in Dell Display and Peripheral Manager for Mac (versions prior to 2.3) stems from improper certificate validation, allowing a low-privileged local user to defeat a security control the application relies on. Dell self-reported the issue and there is no public exploit identified at time of analysis; EPSS is very low (0.07%) and CISA SSVC marks exploitation status as 'none', though technical impact is rated 'total'. …