PT-2026-21517 · Dell · Dell Repository Manager

Michele Damico · Published 2026-02-23 · Updated 2026-02-28 · CVE-2026-21420

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Repository Manager versions prior to 3.4.8

Description Dell Repository Manager (DRM) has an issue related to an uncontrolled search path element. A local attacker with limited privileges could potentially exploit this, leading to arbitrary code execution and privilege escalation.

Recommendations Update Dell Repository Manager to version 3.4.8 or later.

Fix

RCE

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-21420

Affected Products

Dell Repository Manager

References · 8

• https://dell.com/support/kbdoc/en-us/000430183/dsa-2026-059-security-update-for-dell-repository-manager-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21420 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21420 · Vendor Advisory
• https://twitter.com/cracbot/status/2027700373268660300 · Twitter Post
• https://t.me/CVEtracker/45497 · Telegram Post
• https://twitter.com/CVEnew/status/2026265042090389701 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2025941343051067515 · Twitter Post
• https://twitter.com/cracbot/status/2027338072594301181 · Twitter Post