Vulnerability Details CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 11.4%
CVSS Severity
CVSS v3 Score 7.3
Products affected by CVE-2026-71168
-
cpe:2.3:a:dell:system_update:1.9
-
cpe:2.3:a:dell:system_update:1.9.1