CVE-2026-81469

Publié : 21 septembre 2026

Modifié : 21 septembre 2026

Score CVSS

7.8

HIGH

Description détaillée

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://www.dell.com/support/kbdoc/en-us/000502474/dsa-2026-381-security-update-for-dell-supportassist-for-pcs-home-and-business-dell-optimizer-dell-trusted-device-dell-command-update-for-an-unquoted-search-path-or-element-vulnerability

Dernières Vulnérabilités

CVE-2026-85219

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage.

VOIR DÉTAILS

CVE-2026-79320

Stencil core 4.43.5 contains a DOM-based cross-site scripting (XSS) vulnerability in the component runtime. When a downstream application enables the experimental slot fixes option and uses scoped components, assigning a string to the textContent property of such a component's host element causes the value to be parsed as HTML instead of being inserted as text. If an application writes attacker-controlled data to these host elements, the data can be interpreted as markup and script can execute in the context of the application's origin.

VOIR DÉTAILS

CVE-2026-79319

Stencil core 4.43.5 is vulnerable to Incorrect Access Control.

VOIR DÉTAILS