Loading story…
Dell issued security advisory AV26-821 warning that multiple vulnerabilities affect several product lines, including PowerFlex appliance, PowerFlex Rack, PowerFlex Software, Dell Client Platform for Multiple AMD BIOS, Dell Client Platform BIOS for 2026.3 IPU, and Dell VPLEX. National cyber authorities, including the Canadian Centre for Cyber Security and CIRT.GY, republished the notice and highlighted that specific affected version thresholds apply across multiple PowerFlex offerings.
The advisory material does not disclose CVE identifiers or active exploitation details in the available summaries, but it directs organizations to Dell’s security portal for product-specific guidance and remediation updates. Administrators were urged to review the relevant Dell advisories, identify impacted versions in their environments, and apply vendor fixes or updates as they become available to reduce exposure across storage infrastructure and client platform BIOS deployments.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
On August 17, 2026, the Guyana National CIRT published a notice about Dell's advisory, reiterating the affected product lines and recommending that users and administrators review Dell's updates and apply them where necessary. The notice also referenced the Canadian Centre for Cyber Security advisory issued the same day.
The Canadian Centre for Cyber Security published advisory AV26-821 on August 17, 2026, stating that Dell products were affected by vulnerabilities as of August 14, 2026. The notice advised users and administrators to review Dell's advisory and apply updates as they become available.
Dell published a security advisory on August 14, 2026, identifying vulnerabilities affecting PowerFlex appliance, PowerFlex Rack, PowerFlex Software, Dell Client Platform for Multiple AMD BIOS, Dell Client Platform BIOS for 2026.3 IPU, and Dell VPLEX. The advisory identified affected version thresholds for several products and directed customers to Dell's security resources for updates and fixes.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
4 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourcecirt.gy
Open sourcedell.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Dell released multiple security advisories covering vulnerabilities across a broad set of enterprise infrastructure products, and the Canadian Centre for Cyber Security urged organizations to review the notices and apply updates. The affected technologies span storage, networking, data protection, and server platforms, including **Connectrix Switches and Directors**, **AMD-based PowerEdge Servers**, **Dell Command | Update** versions prior to `5.7.0`, **PowerProtect Data Domain**, and **Dell Storage Manager - Replay Manager for Microsoft Servers** versions prior to `8.0.3`. Additional advisories also affected **Data Protection Advisor**, **Dell EMC Isilon OneFS**, **Dell EMC PowerScale**, **Dell Networking OS10**, **PowerProtect DP Series Appliance**, **Elastic Cloud Storage**, **ObjectScale**, and several **PowerSwitch** models. The Canadian notice linked Dell advisories including `DSA-2026-041`, `DSA-2026-171`, `DSA-2026-058`, and `DSA-2026-190`, and characterized the activity as a vendor patch and mitigation effort rather than evidence of active exploitation.
Jun 29, 2026
Dell disclosed vulnerabilities across enterprise management, server, backup, data-protection, and storage offerings. Affected products include **OpenManage Network Integration**, **iDRAC9**, **iDRAC10**, **PowerEdge Server for Intel 2026**, the **OpenManage Python SDK**, **Avamar**, **NetWorker Virtual Edition**, **PowerProtect DP Series Appliance**, **Integrated Data Protection Appliance**, and **PowerScale OneFS**. Dell published affected-version ranges and fixed-version thresholds for OpenManage Network Integration, iDRAC9, iDRAC10, and the OpenManage Python SDK; other listed products have multiple affected versions or models. The Canadian Centre for Cyber Security and Guyana National CIRT advised administrators to review Dell’s security advisories and apply applicable updates as they become available. The notices do not disclose CVE identifiers, vulnerability classes, severity ratings, exploitation status, indicators of compromise, or complete remediation versions for several affected products, making vendor advisory review and asset-specific patch validation necessary.
Sep 9, 2026
Dell published multiple security advisories covering vulnerabilities across **NativeEdge Orchestrator**, **iDRAC Tools**, **PowerEdge**, **PowerScale**, and **PowerStore**, prompting the Canadian Centre for Cyber Security to issue advisory **AV26-598**. The notice says **Dell NativeEdge Orchestrator** versions prior to `4.2.0.0` and **iDRAC Tools** versions prior to `11.4.1.0` are affected, while multiple versions of **PowerEdge**, **PowerScale**, and **PowerStore** also require attention. The Cyber Centre urged administrators to review Dell’s advisories and apply the necessary updates. Referenced notices include **DSA-2026-256** for **Dell NativeEdge Orchestrator**, **DSA-2026-237** for **Dell PowerScale OneFS** third-party component vulnerabilities, and **DSA-2026-273** for **Dell PowerStore T**, indicating that the remediation effort spans infrastructure management, storage, and server platforms.
Jul 12, 2026