Dell Command | Update Vulnerabilities: RCE, Auth Bypass, Deserialization CVEs

Vulnerability Overview Vulnerability ID: DSA-2026-309 Vulnerability Type: Multiple security vulnerabilities in Dell Command Release Date: August 18, 2026 CVSS Score: 7.3 - 8.8 (depending on the specific vulnerability) Scope of Impact Affected Product: Dell Command Affected Versions: Versions prior to 5.7.1 Vulnerability Details: - CVE-2026-53477: Time-of-check to time-of-use (TOCTOU) race condition, potentially leading to privilege escalation. - CVE-2026-58565: Missing authorization check, potentially leading to privilege escalation. - CVE-2026-58562: Missing authorization check, potentially leading to unauthorized access. - CVE-2026-58564: Incorrect default permissions, potentially leading to file system access. - CVE-2026-49816: Untrusted data deserialization, potentially leading to privilege escalation. - CVE-2026-49817: Untrusted data deserialization, potentially leading to privilege escalation. - CVE-2026-56797: Time-of-check to time-of-use (TOCTOU) race condition, potentially leading to privilege escalation. - CVE-2026-56796: Incorrect link resolution before file access, potentially leading to privilege escalation. - CVE-2026-67266: Authorization check error, potentially leading to privilege escalation. - CVE-2026-67268: XML external entity (XXE) error, potentially leading to privilege escalation and server-side request forgery. - CVE-2026-67267: Exposure of sensitive system information, potentially leading to information disclosure. Remediation Remediation Version: 5.7.1 or later Remediation Links: - Dell Command - Dell Command Additional Information Related Documents: - Dell Security Advisories and Notices - Dell Vulnerability Response Policy - CVSS Scoring Guide Credits Reporters: Johannes Hatting, malteoservice, Oni Gabriel, PRL, SuperDevSecurity Legal Disclaimer Dell Technologies assumes no responsibility for any damages arising from the use of the information contained in this document. Affected Products Product Name: Dell Command Provide Feedback Users can evaluate the accuracy, usefulness, and ease of understanding of the article and provide additional information. Footer Information Account Management: My Account, Order Status, Profile Settings, My Products, Make a Payment, Dell Rewards Balance Support: Support Home, Contact Technical Support, Returns Contact Us: Community, Contact Us, X (Twitter), LinkedIn, Instagram, YouTube Our Services: Artificial Intelligence, Products, Solutions, Services, Deals Our Company: Who We Are, Careers, Dell Technologies Capital, Investors, Newsroom, Recycling, Corporate Impact, Customer Stories Our Partners: Find a Partner, Find a Reseller, OEM Solutions, Partner Program Resources: Blog, Dell Rewards, Events, Email Sign-Up, Specialty Product Collections, Privacy Center, Security & Trust Center, Trial Software Downloads Copyright Information Copyright: © 2026 Dell Inc. Terms: Terms of Sale, Privacy Statement, My Privacy Choices, Cookies, Ads & Emails, Legal & Regulatory Accessibility: Accessibility, Anti-Slavery, Human Trafficking & Child Labor

Goal Reached Thanks to every supporter — we hit 100%!

Dell Command | Update Vulnerabilities: RCE, Auth Bypass, Deserialization CVEs

More from this source