EUVD-2026-62519
GHSA-55p7-gc6g-92xm
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Local access with a low-privileged account is required; privilege escalation yields high integrity impact with no confidentiality or availability impact described.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
2DescriptionCVE.org
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
AnalysisAI
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to gain elevated permissions through an Incorrect Authorization flaw (CWE-863). The vulnerability does not require user interaction or special configuration beyond the presence of a low-privileged local account on a Dell system running a vulnerable DCU version. Dell has released a fix in version 5.7.1 via advisory DSA-2026-309, and no public exploit has been identified at time of analysis.
Technical ContextAI
Dell Command Update (DCU) is a Dell-supplied utility that automates driver, firmware, and application updates on Dell endpoint and workstation hardware, identified by CPE cpe:2.3:a:dell:dell_command_update_(dcu):*:*:*:*:*:*:*:*. The root cause is CWE-863 (Incorrect Authorization), a class of defect in which software performs an access control check but uses an incorrect or insufficient policy - meaning the authorization decision is made but reaches the wrong conclusion, permitting operations that should be restricted to higher-privileged principals. In the context of DCU, this allows a low-privileged local user to invoke internal DCU operations or interfaces that are intended to be restricted to administrative users, resulting in privilege escalation on the host. This is distinct from a missing authorization check (CWE-862); here, a check exists but is incorrectly implemented.
RemediationAI
Upgrade Dell Command Update to version 5.7.1 or later, which resolves this vulnerability per Dell advisory DSA-2026-309 at https://www.dell.com/support/kbdoc/en-us/000501378/dsa-2026-309-security-update-for-dell-command-update-for-multiple-vulnerabilities. DCU can typically be updated through the application itself or via Dell SupportAssist. If immediate patching is not feasible, restrict local interactive logon rights to administrative accounts only using group policy or endpoint management controls, reducing the pool of accounts that could exploit the flaw - note this may impact standard-user workflows that rely on local access. Additionally, deploying endpoint detection and response (EDR) rules to alert on unexpected privilege escalation events or anomalous DCU process behavior can serve as a detective compensating control until the patch is deployed.
More in Dell Command Update Dcu
View allPrivilege escalation in Dell Command Update (DCU) versions prior to 5.7.1 allows a local low-privileged attacker to gain
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 enables a low-privileged local attacker to f
Elevation of privilege via deserialization of untrusted data affects Dell Command Update (DCU) versions prior to 5.7.1 o
Incorrect Default Permissions in Dell Command Update (DCU) exposes a local privilege escalation path on all versions pri
Elevation of privileges in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a low-privileged local att
Missing Authorization in Dell Command Update (DCU) versions prior to 5.7.1 permits a low-privileged local user to invoke
Elevation of privilege in Dell Command Update (DCU) versions prior to 5.7.1 is achievable by a local low-privileged atta
Local privilege escalation in Dell Command Update (DCU) versions prior to 5.7.1 allows a low-privileged local attacker t
XML External Entity injection in Dell Command Update (DCU) versions prior to 5.7.1 enables a local attacker with low-pri
Dell Command Update (DCU) versions prior to 5.7.1 expose sensitive system information to low-privileged local users, con
Same weakness CWE-863 – Incorrect Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today