PT-2026-7811 · Dell · Dell Update Package (Dup) Framework

Michele Damico · Published 2026-02-12 · Updated 2026-02-12 · CVE-2026-23857

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Update Package (DUP) Framework versions 23.12.00 through 24.12.00

Description The Dell Update Package (DUP) Framework contains an issue related to improper handling of insufficient permissions or privileges. A local attacker with low privileges could potentially exploit this issue, leading to elevation of privileges.

Recommendations Dell Update Package (DUP) Framework versions 23.12.00 through 24.12.00 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2026-23857

Affected Products

Dell Update Package (Dup) Framework

References · 7

• https://osv.dev/vulnerability/CVE-2026-23857 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000426781/dsa-2026-081-security-update-for-dell-update-package-dup-framework-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23857 · Security Note
• https://t.me/CVEtracker/44498 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2021790229229629540 · Twitter Post
• https://t.me/cveNotify/151801 · Telegram Post
• https://twitter.com/CVEnew/status/2021799450017194406 · Twitter Post