Dell System Update flaw exposes PowerEdge servers to root

Feeds.4Sysops •IT News • October 5, 2026

Dell has fixed a critical path traversal flaw in Dell System Update that could let an unauthenticated attacker with remote access run code as root on vulnerable PowerEdge servers. The update also closes four other high-severity DSU flaws; Dell recommends upgrading to version 2.3.0.0 or later. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Dell System Update Flaw Allows Root Access to Unpatched Servers Dell has disclosed a critical vulnerability (CVE-2026-86360) in its System Update (DSU) tool, affecting versions prior to 2.3.0.0. This path traversal flaw allows unauthenticated remote attackers to execute arbitrary code with root privileges on vulnerable PowerEdge servers. The vulnerability has a CVSS score of 9.6, indicating its severity. Dell has urged customers to patch the flaw immediately to prevent potential exploitation. Alongside this critical flaw, Dell also addressed four additional high-severity vulnerabilities in DSU, including two that could lead to remote code execution. As of now, there are no reports of of these vulnerabilities. The FBI and CISA have long warned about the dangers of path traversal vulnerabilities, emphasizing their potential for severe impacts. 12 sources 72

Dell System Update flaw exposes PowerEdge servers to root

The full story

Extracted Entities

CWE Weaknesses (1)

Vulnerabilities (1)