CVE-2026-67268
MediumCVSS 6.5Summary
Dell Command Update (DCU) versions prior to 5.7.1 contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.
Risk Assessment
An attacker could gain elevated privileges on the system and make requests to internal network resources, potentially leading to confidentiality and integrity breaches.
Recommendation
Update Dell Command Update to version 5.7.1 or later, which includes fixes for the XXE vulnerability. Restrict local access to the system for unauthorized users.
Original NVD description (English source)
Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery.