Dell warned customers to urgently update Dell System Update, a tool used to deploy BIOS, firmware, and software updates on PowerEdge servers, after finding a critical flaw that can let attackers gain root-level control. The issue, CVE-2026-86360, is a path traversal vulnerability in the DSU command-line interface; Dell says unauthenticated attackers with remote access could exploit it for arbitrary code execution. Dell also fixed CVE-2026-63697, CVE-2026-71168, CVE-2026-86361, and CVE-2026-86362, and recommends upgrading to DSU 2.3.0.0 or later.
Why it matters: Organizations using Dell PowerEdge server update tooling could be exposed to full system compromise if they delay patching. Admins should update DSU to 2.3.0.0 or later as soon as possible and review whether the tool is remotely reachable.
Sergiu Gatlan
2026.10.05
100% relevant
This article appears to be the first tracked report of Dell's advisory for CVE-2026-86360 and related DSU flaws, establishing a distinct patch-and-vulnerability story.
← Back to all stories