DSA-2026-417: Security update for Dell Update Package (DUP) Framework Vulnerabilities | Dell US

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publisherwww.dell.com

Article IDNo stable ID in source URL

Verified snapshot26 Sept 2026, 16:54 UTC

Linked CVEs5

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-86358Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability
CVE-2026-71180Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability
CVE-2026-71179Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability
CVE-2026-71181Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability
CVE-2026-71182Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability

Source and provenance

Original title: DSA-2026-417: Security update for Dell Update Package (DUP) Framework Vulnerabilities | Dell US. Captured 26 Sept 2026, 16:54 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗