EUVD-2026-80865Severity by source
AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Local low-priv attacker (AV:L/PR:L) needs a DUP to be run (UI:R); unchecked return value crossing into a privileged/system context justifies S:C with full C/I/A impact on escalation.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
4DescriptionCVE.org
Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
AnalysisAI
Local privilege escalation in Dell Update Package (DUP) Framework versions prior to 26.07.03 lets a low-privileged local user obtain elevated privileges when a Dell Update Package is executed through the affected framework. Exploitation is not autonomous: per the assessed vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) it requires an already-authenticated low-privileged local account plus user interaction to trigger the vulnerable code path, and the impact crosses a security boundary (S:C) with high confidentiality, integrity and availability consequences. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an already-authenticated low-privileged local account on the affected host (PR:L, AV:L) AND user interaction (UI:R) - specifically the execution of a Dell Update Package via the DUP Framework at a version prior to 26.07.03. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are moderately consistent and point to a credible but not urgent local privilege-escalation issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: Dell addresses this issue in DUP Framework 26.07.03 and later - upgrade every host that has the framework installed to 26.07.03 or newer, and verify the installed framework version after updating since the flaw is only closed on patched builds (see Dell advisory DSA-2026-417 at https://www.dell.com/support/kbdoc/en-us/000509455/dsa-2026-417-security-update-for-dell-update-package-dup-framework-vulnerabilities for platform-specific packages and instructions). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm whether Dell Update Package Framework is present in your environment by inventorying Dell Command | Update, Dell Update, and Dell SupportAssist installations and noting the framework version reported on each endpoint; prioritize any host where non-administrative or shared accounts routinely run update packages, and remind users not to execute Dell update packages supplied outside normal patching channels. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Update Package Framework
View allDell Update Package Framework versions 23.12.00 through 24.12.00 suffers from improper privilege handling that allows lo
Local privilege escalation in the Dell Update Package (DUP) Framework (versions prior to 26.07.03) allows an attacker wh
An Uncontrolled Search Path Vulnerability is applicable to the following: Dell Update Package (DUP) Framework file versi
Stack-based buffer overflow in the Dell Update Package (DUP) Framework, affecting all versions prior to 26.07.03, allows
A link-following (symlink) defect in the Dell Update Package (DUP) Framework before version 26.07.03 allows a locally au
Improper link resolution in the Dell Update Package (DUP) Framework before 26.07.03 allows an attacker who already holds
Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege Escalation Vulnerability. Rated
Same weakness CWE-252 – Unchecked Return Value
View allShare
External POC / Exploit Code
Leaving vuln.today