GoKawiilDell patches critical root-access flaw in System Update deployment tool
Dell issued an advisory for CVE-2026-86360, a path traversal vulnerability in its Dell System Update command-line tool that could let an unauthenticated remote attacker execute code with root privileges on PowerEdge servers. The company also disclosed four additional high-severity DSU flaws and two maximum-severity Container Storage Modules vulnerabilities the same day, urging customers to upgrade DSU to version 2.3.0.0 or later.
GoKawiil's interpretation of the reporting above, not reported fact.
Dell says no exploitation has been observed yet, but path traversal bugs have long been flagged by CISA and the FBI as avoidable design flaws that attackers frequently weaponize once disclosed. Because DSU manages firmware and OS updates across enterprise server fleets, a working exploit could give attackers a route to full system compromise at scale, making rapid patching especially important for organizations running PowerEdge infrastructure.
- CVE-2026-86360 lets unauthenticated attackers gain root access via path traversal in Dell System Update.
- Dell also patched four other high-severity DSU flaws and two critical Container Storage Modules bugs the same day.
- No active exploitation confirmed yet, but Dell urges immediate upgrade to DSU 2.3.0.0 or later.
Source: bleepingcomputer.com, 2026-10-05
Published there as: “New Dell System Update flaw lets hackers gain root privileges”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.