Dell DDPM Mac Vulnerability Advisory: RCE, LPE, and Auth Bypass (CVE-2026-46735/34/32)

Vulnerability Overview Vulnerability IDs: CVE-2026-46735, CVE-2026-46734, CVE-2026-46732 Vulnerability Description: - CVE-2026-46735: Dell Display and Peripheral Manager (DDPM Mac) versions prior to 2.3 contain an "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" vulnerability, which may lead to command injection. - CVE-2026-46734: Dell Display and Peripheral Manager (DDPM Mac) versions prior to 2.3 contain an "Improper Certificate Validation" vulnerability, which may lead to security feature bypass. - CVE-2026-46732: Dell Display and Peripheral Manager (DDPM Mac) versions prior to 2.3 contain an "Improper Concurrency: Shared Resource Execution" vulnerability, which may lead to privilege escalation. Affected Products Affected Product: Dell Display and Peripheral Manager (DDPM Mac) Affected Versions: Versions prior to 2.3 Remediation Fixed Version: 2.3 and later Release Date: November 6, 2026 Related Links: Support for Dell Display and Peripheral Manager Additional Information CVSS Score: - CVE-2026-46735: 7.8 - CVE-2026-46734: 7.3 - CVE-2026-46732: 6.7 CVSS Vector String: - CVE-2026-46735: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVE-2026-46734: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/H/I:H/A:H - CVE-2026-46732: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/H/I:H/A:H Acknowledgments CVE-2026-46732: Thanks to makroservice for reporting this issue. CVE-2026-46734, CVE-2026-46734: Thanks to Ori Gabriel for reporting this issue. Legal Disclaimer The information in this security advisory should be read and used to help avoid situations that may arise from the described issues. Dell Technologies distributes security advisories to bring important security information to the attention of users of the affected products. Dell Technologies assesses risks based on diverse evaluations of installed systems, which may not represent the actual risk to local installations and individual environments. All users are advised to determine how this information applies to their personal environment and take appropriate action. Affected Product Dell Display and Peripheral Manager Provide Feedback Users can rate the article and provide additional information. Revision History Revision: 1.0 Date: June 16, 2026 Description: Initial release Related Links Dell Security Advisories and Notices Dell Vulnerability Response Policy CVSS Scoring Guide Footer Information Account: My Account, Order Status, Profile Settings, My Products Support: Support Home, Contact Technical Support Contact Us: Community, Contact Us Our Services: Artificial Intelligence, Products, Solutions, Services, Deals Our Company: Who We Are, Careers, Dell Technologies Capital, Investors, Newsroom, Recycling, Corporate Impact, Customer Stories Our Partners: Find a Partner, OEM Solutions, Partner Program Resources: Blog, Events, Email Sign-Up, Privacy Centre, Security & Trust Centre, Trial Software Downloads Copyright Information Copyright: © 2026 Dell Inc. Terms: Terms of Sale, Privacy Statement, Cookies, Ads & Emails, Legal & Regulatory, Accessibility

Goal Reached Thanks to every supporter — we hit 100%!

Dell DDPM Mac Vulnerability Advisory: RCE, LPE, and Auth Bypass (CVE-2026-46735/34/32)