Medium severity6.5NVD Advisory· Published Aug 19, 2026

CVE-2026-67268

Description

Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Command Updatellm-fuzzy
Range: <5.7.1

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000501378/dsa-2026-309-security-update-for-dell-command-update-for-multiple-vulnerabilitiesnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000