Vendor
Dell vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 556 vulnerabilities in Dell: 17 in the last 7 days and 373 in the last 90 days, 41 of them critical and 2 exploited in the wild. The most recent, CVE-2026-111521, was published on 11 November 2026. 91 vulnerabilities in the last four weeks, down 19% on the four before (112). 8 critical against 10. 88 technologies have a page of their own.
- Last 7 days
- 17
- Last 90 days
- 373
- Critical, all time
- 41
- Exploited in the wild
- 2
About Dell
An American technology company that develops, sells, repairs, and supports computers and related products and services.
Dell technologies
- Dell PowerProtect Data Domain58
- Dell Secure Connect Gateway Appliance56
- Dell Secure Connect Gateway Application56
- Dell Secure Connect Gateway 5.0 Appliance40
- Dell Secure Connect Gateway 5.0 Application40
- Dell Policy Manager For Secure Connect Gateway28
- Dell Secure Connect Gateway Policy Manager28
- Dell OpenManage Enterprise26
- Dell Data Domain Operating System25
- Dell PowerFlex Manager22
- Dell OpenManage Server Administrator21
- Dell Alienware Command Center18
- Dell Powerprotect Dp Series Appliance17
- Dell Wyse Management Suite15
- Dell PowerStore13
- Dell ThinOS13
- Dell Container Storage Modules11
- Dell PowerProtect Data Manager11
- Dell ObjectScale10
- Dell Secure Connect Gateway10
- Dell ThinOS 1010
- Dell Peripheral Manager9
- Dell OneFS8
- Dell Cloudlink7
- Dell Display7
- Dell Latitude 33307
- Dell Latitude 34207
- Dell Latitude 34407
- Dell Latitude 34507
- Dell Latitude 54407
- Dell Latitude 54507
- Dell Latitude 55207
- Dell Latitude 55307
- Dell Latitude 55407
- Dell Latitude 55507
- Dell Optiplex 3000 Tc7
- Dell Optiplex 5400 All-In-One7
- Dell Optiplex 70207
- Dell Optiplex All-In-One 74107
- Dell Optiplex All-In-One 74207
- Dell Optiplex Micro Plus 70107
- Dell PowerFlex Appliance Intelligent Catalog7
- Dell PowerFlex Rack7
- Dell PowerProtect Data Domain Management Center7
- Dell Precision 3260 Compact7
- Dell Precision 32807
- Dell Pro 14 Pc142507
- Dell Pro 16 Pc162507
- Dell Pro 16 Plus Pb162507
- Dell Pro 24 All-In-One7
- Dell Pro 24 All-In-One \(65w\) Qc242507
- Dell Pro 24 All-In-One Plus Qb242507
- Dell Pro Max 147
- Dell Pro Max 16 Plus7
- Dell Pro Max Microfcm22507
- Dell Pro Micro Qcm12507
- Dell Pro Micro-Thin Client Q9m12607
- Dell Pro Rugged 13 Ra132507
- Dell Pro Rugged 14 Rb142507
- Dell Pro Slim Low Sff7
- Dell Pro Slim Plus Xe5 Oem Qbs12507
- Dell Pro Tower Plus Xe5 Oem Qbt12507
- Dell Pro Tower Qct12507
- Dell SmartFabric OS107
- Dell Wyse 5070 Extended Thin Client7
- Dell Wyse 5070 Thin Client7
- Dell Wyse 5470 All-In-One Thin Client7
- Dell Wyse 5470 Mtc7
- Dell Display and Peripheral Manager6
- Dell OpenManage Ansible Modules6
- Dell Powerprotect One6
- Dell Unity Operating Environment6
- Dell ECS5
- Dell System Update5
- Dell Unisphere for PowerMax Virtual Appliance5
- Dell Update Package Framework5
- Dell Elastic Cloud Storage4
- Dell Live Optics Collector4
- Dell PowerScale InsightIQ4
- Dell Unisphere for PowerMax4
- Dell Unisphere for PowerMax vApp4
- Dell Application Store3
- Dell Cloud Disaster Recovery3
- Dell Command | Configure3
- Dell iDRAC103
- Dell iDRAC93
- Dell Powerprotect Cyber Recovery3
- Dell PowerProtect Data Domain Virtual Edition3
Latest Dell vulnerabilities
- CVE-2026-111521: Dell Display and Peripheral Manager TOCTOU privilege escalationhighCVSS 7
- CVE-2026-91891: Dell Terraform Provider for PowerStore insufficient log redactionhighCVSS 7.5
- CVE-2026-91880: Dell Terraform Provider for PowerFlex improper certificate validation in SSH clienthighCVSS 8.9
- CVE-2026-91878: Dell OpenManage Ansible Modules XML injection in output conversionhighCVSS 7.6
- CVE-2026-91877: Dell OpenManage Ansible Modules OData filter injectionhighCVSS 7.6
- CVE-2026-91876: Dell OpenManage Ansible Modules XXE in XML parsingmediumCVSS 5.5
- CVE-2026-91875: Dell OpenManage Ansible Modules improper certificate validation in SessionAPIhighCVSS 8.7
- CVE-2026-91874: Dell OpenManage Ansible Modules improper certificate validation in iDRACConnectionhighCVSS 8.7
- CVE-2026-91873: Dell OpenManage Ansible Modules improper certificate validation in iDRACRedfishAPIhighCVSS 8.7
- CVE-2026-91890: Dell Ansible Storage for Unity improper certificate validationhighCVSS 8.7
- CVE-2026-91879: Dell Terraform Provider for ObjectScale sensitive information insertion in log fileshighCVSS 8.8
- CVE-2026-91872: Dell Ansible Storage for PowerStore information exposure in log filesmediumCVSS 5.5
- CVE-2026-91871: Dell Ansible Storage for PowerStore improper certificate validation in API clienthighCVSS 7.4
- CVE-2026-91870: Dell Ansible Storage for PowerFlex improper certificate validation in API clienthighCVSS 7.4
- CVE-2026-86364: Dell Live Optics Collector weak random value generationmediumCVSS 4.7
- CVE-2026-86363: Dell Live Optics Collector predictable IV in CBC mode encryptionmediumCVSS 5.5
- CVE-2026-68862: Dell Terraform Provider for PowerFlex OS command injection in SDC provisioningmediumCVSS 6.6
- CVE-2026-82161: Dell Wyse Management Suite cross-site scriptingmediumCVSS 6.8
- CVE-2026-82159: Dell Wyse Management Suite cross-site scriptinghighCVSS 8.8
- CVE-2026-82158: Dell Wyse Management Suite cross-site scriptingcriticalCVSS 9
- CVE-2026-82155: Dell OS Recovery Tool untrusted search path vulnerabilityhighCVSS 7.8
- CVE-2026-91900: Dell Alienware Command Center improper authorization in custom URL handlermediumCVSS 5.8
- CVE-2026-91899: Dell Alienware Command Center improper cryptographic signature verificationmediumCVSS 6.4
- CVE-2026-91898: Dell Alienware Command Center cryptographic signature verification failurehighCVSS 8.1
- CVE-2026-91897: Dell Alienware Command Center improper certificate validationmediumCVSS 6.4
Most severe Dell vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-22769: Dell RecoverPoint for Virtual Machines hard-coded credentialscriticalexploited in the wildCVSS 10EPSS 22.0%
- CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerabilitycriticalexploited in the wildCVSS 8.8
- CVE-2026-70416: Dell ObjectScale deserialization of untrusted data vulnerabilitycriticalCVSS 10EPSS 0.9%
- CVE-2026-63692: Dell Container Storage Modules missing authentication in gRPC servicescriticalCVSS 10
- CVE-2026-63688: Dell Container Storage Modules missing authentication in gRPC servercriticalCVSS 10
- CVE-2026-67269: Dell Container Storage Modules Operator improper privilege management in reconcilercriticalCVSS 9.9
- CVE-2026-81467: Dell ThinOS 10 OS command injectioncriticalCVSS 9.8EPSS 3.0%
- CVE-2026-67261: Dell Virtual Storage Integrator for VMware vSphere Client OS command injection in IAPIcriticalCVSS 9.8EPSS 2.3%
- CVE-2026-58574: Dell PowerStore missing authentication in management interfacecriticalCVSS 9.8EPSS 0.6%
- CVE-2026-63695: Dell SmartFabric OS10 session fixation vulnerabilitycriticalCVSS 9.8EPSS 0.5%
Vulnerabilities per week
91 vulnerabilities in the last four weeks, down 19% on the four before (112). 8 critical against 10. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 3 | 0 | |
| 24 Aug 2026 | 15 | 1 | |
| 31 Aug 2026 | 20 | 2 | |
| 7 Sep 2026 | 115 | 7 | |
| 14 Sep 2026 | 43 | 3 | |
| 21 Sep 2026 | 18 | 0 | |
| 28 Sep 2026 | 10 | 0 | |
| 5 Oct 2026 | 41 | 7 | |
| 12 Oct 2026 | 7 | 0 | |
| 19 Oct 2026 | 4 | 0 | |
| 26 Oct 2026 | 58 | 7 | |
| 2 Nov 2026 | 22 | 1 | |
| 9 Nov 2026 | 17 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Dell vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/dell)<a href="https://junglewise.ai/threats/vendors/dell"><img src="https://junglewise.ai/threats/vendors/dell/badge.svg" alt="Dell vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/dell.json, and this page as text at https://junglewise.ai/threats/vendors/dell.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Dell vulnerabilities", https://junglewise.ai/threats/vendors/dell, 13 November 2026.