CVE-2026-23857 - CERT CVE
ID CVE-2026-23857
Sažetak Dell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Reference
CVSS
Base: 8.2
Impact: 6.0
Exploitability:1.5
Pristup
VektorSloženostAutentikacija
LOCAL LOW LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH HIGH
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Zadnje važnije ažuriranje 12-02-2026 - 03:15
Objavljeno 12-02-2026 - 03:15