CVE-2026-63697

Tuesday, October 06, 2026

7.6

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Summary

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Affected Software

Vendor	Product	Version Range	Status
Dell	System Update	`0 < 2.3.0.0 or later`	affected

Weaknesses

CWE-295: CWE-295: Improper Certificate Validation

References

https://www.dell.com/support/kbdoc/en-us/000515843/dsa-2026-324-security-update-for-dell-system-update-dsu-vulnerabilities

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.

←Previous
Next→