EUVD-2026-62509
GHSA-wwx5-c6f8-7jqf
Severity by source
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
TOCTOU exploitation requires winning a timing race, warranting AC:H over vendor's AC:L; all other metrics match the described local, low-privilege, user-triggered scenario.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
AnalysisAI
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a local low-privileged attacker exploiting a Time-of-check Time-of-use (TOCTOU) race condition (CWE-367). The vulnerability allows an attacker who already has a local foothold on the system to manipulate a resource between the time it is checked and the time it is used by the update utility, resulting in full system compromise (C:H/I:H/A:H). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions: (1) the attacker must hold a valid low-privileged local account on the target Windows system (PR:L per CVSS); (2) a legitimate user must initiate or trigger a Dell Command Update operation, such as a manual scan or a scheduled update task (UI:R per CVSS); and (3) the attacker must win the race condition between DCU's resource check and resource use, which requires local process execution capability. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS 3.1 score of 7.3 (High) with vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H reflects a high-impact local privilege escalation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with a low-privileged local account on a Dell endpoint running DCU prior to 5.7.1 waits for or social-engineers a user into triggering a DCU update scan. During the window between DCU's integrity check of an update resource (such as a staging path or temporary file) and its privileged consumption of that resource, the attacker replaces the validated content with a malicious payload. … |
| Remediation | Upgrade Dell Command Update to version 5.7.1 or later, which contains the vendor-released fix per Dell advisory DSA-2026-309 (https://www.dell.com/support/kbdoc/en-us/000501378/dsa-2026-309-security-update-for-dell-command-update-for-multiple-vulnerabilities). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct inventory of all systems running Dell Command Update versions prior to 5.7.1 and flag business-critical systems requiring priority protection. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Dell Command Update Dcu
View allPrivilege escalation in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to gain
Elevation of privileges in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a low-privileged local att
Incorrect Default Permissions in Dell Command Update (DCU) exposes a local privilege escalation path on all versions pri
Elevation of privilege via deserialization of untrusted data affects Dell Command Update (DCU) versions prior to 5.7.1 o
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 enables a low-privileged local attacker to f
Missing Authorization in Dell Command Update (DCU) versions prior to 5.7.1 permits a low-privileged local user to invoke
Local privilege escalation in Dell Command Update (DCU) versions prior to 5.7.1 allows a low-privileged local attacker t
XML External Entity injection in Dell Command Update (DCU) versions prior to 5.7.1 enables a local attacker with low-pri
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to ga
Dell Command Update (DCU) versions prior to 5.7.1 expose sensitive system information to low-privileged local users, con
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today