Dell warns of critical System Update flaw allowing root access

Dell patched a critical vulnerability (CVE-2026-86360) in its System Update (DSU) CLI tool for Linux and Windows that lets unauthenticated remote attackers execute code with root privileges via a path traversal flaw. The fix is available in DSU 2.3.0.0 or later.

• CVE-2026-86360 allows remote code execution with root privileges
• Fix available in Dell System Update 2.3.0.0 or later
• Four high-severity DSU flaws also patched
• Dell urges patching two maximum-severity CSM vulnerabilities