Alertas de Seguridad de la Información

D Alto vulnerabilidad

01/07/2026

[CVE-2026-41121] Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Befo…

Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link Following’) vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

26/06/2026

[CVE-2026-40711] Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-power…

Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

nvdaltovulnerabilidad CVSS 8.0 NVD

M Alto vulnerabilidad

25/06/2026

[CVE-2026-46735] Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutraliz…

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.

nvdaltovulnerabilidad CVSS 7.8 NVD

D Alto vulnerabilidad

25/06/2026

[CVE-2026-49506] Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathn…

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

nvdaltovulnerabilidad CVSS 7.2 NVD

D Alto vulnerabilidad

25/06/2026

[CVE-2026-46733] Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Acces…

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

nvdaltovulnerabilidad CVSS 7.8 NVD

D Alto vulnerabilidad

25/06/2026

[CVE-2026-46734] Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certifica…

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

nvdaltovulnerabilidad CVSS 7.3 NVD

D Crítico vulnerabilidad

25/06/2026

[CVE-2026-41120] Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untru…

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution.

nvdcriticovulnerabilidad CVSS 9.8 NVD

D Alto vulnerabilidad

22/06/2026

[CVE-2026-44271] Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of …

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

nvdaltovulnerabilidad CVSS 8.1 NVD

D Alto vulnerabilidad

22/06/2026

[CVE-2026-44272] Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of …

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

nvdaltovulnerabilidad CVSS 8.8 NVD

D Alto vulnerabilidad

22/06/2026

[CVE-2026-44274] Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Be…

Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

nvdaltovulnerabilidad CVSS 7.8 NVD

D Alto vulnerabilidad

19/06/2026

[CVE-2026-46461] Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerabi…

Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

nvdaltovulnerabilidad CVSS 7.8 NVD

D Alto vulnerabilidad

17/06/2026

[CVE-2026-32652] Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. …

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged attacker with console access could potentially exploit this vulnerability to gain Filesystem access. This vulnerability only affects fresh installations of Collector versions earlier than 1.18.3. Systems that have been upgraded (either manually or automatically) to version 1.18.3 or…

nvdaltovulnerabilidad CVSS 7.8 NVD

D Alto vulnerabilidad

17/06/2026

[CVE-2026-49502] Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerabi…

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.

nvdaltovulnerabilidad CVSS 7.4 NVD

D Alto vulnerabilidad

17/06/2026

[CVE-2026-35066] Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerabi…

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

nvdaltovulnerabilidad CVSS 7.1 NVD

D Alto vulnerabilidad

17/06/2026

[CVE-2026-32804] Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerabi…

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.

nvdaltovulnerabilidad CVSS 8.1 NVD

D Alto vulnerabilidad

17/06/2026

[CVE-2026-35065] Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critica…

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access.

nvdaltovulnerabilidad CVSS 8.8 NVD

D Alto vulnerabilidad

17/06/2026

[CVE-2026-22283] Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from U…

Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

16/06/2026

[CVE-2024-24909] Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vul…

Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the gateway plugin. A remote authenticated user could potentially exploit this vulnerability to escalate privileges. The malicious user may gain the ability to run arbitrary code remotely. This is a high severity vulnerability so Dell recommends customers to upgrade at the earliest opp…

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

04/06/2026

[CVE-2025-46638] Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An …

Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to a Denial of Service (DoS).

nvdaltovulnerabilidad CVSS 7.5 NVD

D Alto vulnerabilidad

02/06/2026

[CVE-2026-40715] Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerab…

Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.

nvdaltovulnerabilidad CVSS 7.8 NVD