PT-2026-21517 · Dell · Dell Repository Manager

Michele Damico · Publicado 2026-02-23 · Atualizado 2026-02-28 · CVE-2026-21420

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Repository Manager versions prior to 3.4.8

Description Dell Repository Manager (DRM) has an issue related to an uncontrolled search path element. A local attacker with limited privileges could potentially exploit this, leading to arbitrary code execution and privilege escalation.

Recommendations Update Dell Repository Manager to version 3.4.8 or later.

Correção

RCE

LPE

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2026-21420

Produtos afetados

Dell Repository Manager

Referências · 8

• https://dell.com/support/kbdoc/en-us/000430183/dsa-2026-059-security-update-for-dell-repository-manager-vulnerability · Aviso do Fabricante
• https://twitter.com/cracbot/status/2027700373268660300 · Publicação no Twitter
• https://t.me/CVEtracker/45497 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-21420 · Nota de Segurança
• https://twitter.com/CVEnew/status/2026265042090389701 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-21420 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2025941343051067515 · Publicação no Twitter
• https://twitter.com/cracbot/status/2027338072594301181 · Publicação no Twitter