CVE-2026-86360

waiting for further signals

EUVD-2026-93778 ↗

no check availablenot proven exploitable

cve.orgpublic pockev

Dell System Update >= 0, < 2.3.0.0 or later

fixed in 2.3.0.0 or later

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ETK-2026-793, permanent identifier

cvss9.6cna vendorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

14d 19h 11msince last run

19mAI analysis

timeline

0 = trigger signal

trigger signal (cve.org) +0hwaiting for further signals+0h57m

+2h

+4h

+6h

+8h

+10h

+12h

description

Dell System Update versions earlier than 2.3.0.0 are affected by a path traversal vulnerability. A remote attacker who does not need to authenticate may access files and potentially run code with root-level privileges.

mitigation

Upgrade Dell System Update to version 2.3.0.0 or later. Until upgrades are complete, limit remote access to systems running the affected software.

fixed in 2.3.0.0 or later

check

exploit

automation

contextual

auth required

EPSS

0.63%49th percentile

agent run time

19m

cve.org record, t = 0

2026-10-06 18:13Z

Δ to public poc

–

Δ to kev

–

outcome

Contextual: an exploit technique exists, but no deterministic check could cover this one.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

2026-10-06 18:13Z
cve_org: trigger signal, started the run
https://www.cve.org/CVERecord?id=CVE-2026-86360

this entry in the feed

GET /api/v1/feed/CVE-2026-86360

{
  "etk_id": "ETK-2026-793",
  "cve_id": "CVE-2026-86360",
  "display_id": "CVE-2026-86360",
  "ghsa_id": null,
  "euvd_id": "EUVD-2026-93778",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Path traversal in Dell System Update",
  "summary": "Dell System Update versions earlier than 2.3.0.0 are affected by a path traversal vulnerability. A remote attacker who does not need to authenticate may access files and potentially run code with root-level privileges.",
  "mitigation": "Upgrade Dell System Update to version 2.3.0.0 or later. Until upgrades are complete, limit remote access to systems running the affected software.",
  "vendor": "Dell",
  "product": "System Update",
  "affected": [
    {
      "affected_notes": [
        ">= 0, < 2.3.0.0 or later"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [
        "2.3.0.0 or later"
      ],
      "package_name": "System Update",
      "purl": null
    }
  ],
  "cwes": [
    22
  ],
  "cvss_score": 9.6,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
  "epss_score": 0.0063,
  "epss_percentile": 0.4937,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 19.3202956,
  "t0_at": "2026-10-06T18:13:49.171000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-06T18:13:49.171000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-06T18:13:49.171000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86360"
    }
  }
}

published 2026-10-06 18:51Z
last change 2026-10-21 13:29Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.