EUVD-2026-62419
GHSA-8whq-5jr6-mx34
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Local-only attack with low-privilege requirement matches description; unchanged scope and limited CIA impact reflect bounded privilege escalation within the PowerPath process.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
2DescriptionCVE.org
Dell PowerPath, version 7.2 through to 8.0 SP1, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
AnalysisAI
Elevation of privilege in Dell PowerPath for Windows (versions 7.2 through 8.0 SP1) allows a low-privileged local attacker to gain elevated system privileges through improper privilege management (CWE-269). Dell has published security advisory DSA-2026-167 confirming the flaw and releasing a fix; the CVSS 3.1 base score is 5.3 (Medium), reflecting the local-only attack vector and limited scope. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing local account with at minimum low-privilege access (PR:L per CVSS vector) on a Windows host running Dell PowerPath versions 7.2 through 8.0 SP1. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L accurately characterizes this as a constrained, local privilege escalation: the attacker must already hold a low-privileged account on the target Windows host, there is no remote attack surface, and the impact across confidentiality, integrity, and availability is limited. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Administrators should apply the security update described in Dell advisory DSA-2026-167 at https://www.dell.com/support/kbdoc/en-us/000501417/dsa-2026-167-security-update-for-dell-powerpath-for-windows-vulnerabilities. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains Insecure File and Folder Permissions vulnerability. Rated high s
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains DLL Hijacking Vulnerabilities. Rated high severity (CVSS 7.3), t
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. Rated medium seve
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today