FAIL › dossier
Dell
VENDOR· dossier confidence 50%
Dell is a major technology vendor with a significant history of high and critical vulnerabilities in its management and virtualization software, including recent RCEs and privilege escalation flaws. Its security posture is mixed, with recurring issues in access control and credential management across its product suite.
PROFILE
CategoryTechnology VendorWhat they doDell is a technology company that provides enterprise computing, storage, and networking solutions.
SECURITY POSTURE
Dell has a mixed security posture with a history of high and critical vulnerabilities across its management and virtualization software, including RCEs, privilege escalation, and improper certificate validation flaws.
Notable failures
- CVE-2026-54489 critical RCE in Virtual Storage Integrator
- CVE-2026-22769 high RCE via hardcoded credentials in RP4VMs
- CVE-2021-21551 high privilege escalation in dbutil driver
Patterns: repeated high/critical RCEs in management and virtualization software; insufficient access controls and hardcoded credentials in edge and management tools
FAILURE HISTORY · 24
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-09-16 | CVE-2026-70416 | critical | Dell ObjectScale versions before 4.4.0.0 have a deserialization of untrusted data flaw allowing remote code execution by unauthenticated attackers. |
| 2026-08-06 | CVE-2026-54489 | critical | Dell's Virtual Storage Integrator for VMware vSphere Client versions before 10.11.1.0 has a critical unauthenticated remote vulnerability allowing session hijacking and admin impersonation. |
| 2026-02-18 | CVE-2026-22769 | high | Dell RP4VMs exposed due to hardcoded creds |
| 2026-09-01 | CVE-2026-79687 | critical | An unauthenticated remote attacker can access the filesystem on Dell PowerStore SDNAS due to a missing authentication flaw. |
| 2022-03-31 | CVE-2021-21551 | high | Dell's dbutil driver had an insufficient access control flaw allowing privilege escalation, DoS, or data leaks. |
| 2026-10-09 | CVE-2026-76779 | high | CVE-2026-76779: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, |
| 2026-10-06 | CVE-2026-82162 | high | CVE-2026-82162: Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper |
| 2026-09-29 | CVE-2026-73595 | medium | CVE-2026-73595: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, |
| 2026-09-17 | CVE-2026-81475 | high | CVE-2026-81475: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Mis |
| 2026-09-17 | CVE-2026-81440 | high | CVE-2026-81440: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use |
| 2026-09-17 | CVE-2026-81476 | high | CVE-2026-81476: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Im |
| 2026-09-17 | CVE-2026-81478 | high | CVE-2026-81478: Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use |
| 2026-09-16 | CVE-2025-43936 | high | CVE-2025-43936: Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Au |
| 2026-09-15 | CVE-2026-81239 | high | CVE-2026-81239: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestric |
| 2026-09-15 | CVE-2026-81240 | high | CVE-2026-81240: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestric |
| 2026-09-15 | CVE-2026-81238 | high | CVE-2026-81238: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Au |
| 2026-09-15 | CVE-2026-81236 | high | CVE-2026-81236: Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestric |
| 2026-09-09 | CVE-2026-79941 | medium | CVE-2026-79941: Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application |
| 2026-09-09 | CVE-2026-79689 | medium | CVE-2026-79689: Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application |
| 2026-09-07 | CVE-2026-80131 | high | CVE-2026-80131: Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application |
| 2026-09-07 | CVE-2026-80129 | medium | CVE-2026-80129: Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application |
| 2026-09-07 | CVE-2026-80164 | high | CVE-2026-80164: Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application |
| 2026-08-07 | CVE-2026-56793 | high | CVE-2026-56793: Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Im |
| 2026-08-06 | CVE-2026-64993 | medium | CVE-2026-64993: Dell RVTools versions prior to 4.8.1, contains an improper certificate validatio |
Open questions: Dell's current patching SLA for critical vulnerabilities · Dell's specific CMMC compliance status
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-31 04:05:01.493037+00:00