DSA-2026-309: Security Update for Dell Command | Update for Multiple Vulnerabilities | Dell US

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2026-56796Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability
• CVE-2026-56797Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
• CVE-2026-58565Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability
• CVE-2026-67268Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability
• CVE-2026-58564Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability
• CVE-2026-49816Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability
• CVE-2026-67266Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Authorization vulnerability
• CVE-2026-53477Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
• CVE-2026-49817Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability
• CVE-2026-67267Dell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability
• CVE-2026-58562Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability

Source and provenance

Original title: DSA-2026-309: Security Update for Dell Command | Update for Multiple Vulnerabilities | Dell US. Captured 26 Sept 2026, 20:28 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.