Loading story…
Dell issued security advisory AV26-843 covering vulnerabilities across multiple product lines and urging customers to apply available software and firmware updates. National cyber agencies and incident response teams in Canada, Italy, and Guyana amplified the notice, highlighting affected enterprise, endpoint, storage, networking, and thin-client offerings such as Alienware Command Center, Dell Command Update, OpenManage Enterprise, PowerStoreT OS, and PowerScale OneFS.
One of the disclosed issues is a high-severity flaw in Dell ThinOS 10 classified as a Security Restrictions Bypass. According to the advisory, a local low-privileged attacker could exploit the vulnerability to gain unauthorized access on affected systems, with versions earlier than 2605_10.2518 identified as vulnerable; administrators were advised to review Dell’s bulletin and update impacted products to the fixed versions listed there.
See real exploitation activity before you spend the cycle.
5 events from the most recent confirmed update back to the earliest known activity.
Guyana National CIRT published a notice on Dell's advisory covering multiple vulnerable Dell products and corresponding fixed versions. It recommended that users and administrators review Dell's updates and apply them where necessary.
The Canadian Centre for Cyber Security published advisory AV26-843 summarizing Dell's notice about vulnerabilities affecting multiple Dell products. It advised users and administrators to review Dell's advisory and apply updates as they become available.
Dell published a security advisory stating that, as of August 17, 2026, multiple products were affected by vulnerabilities, including Alienware Command Center, Dell Command Update, OpenManage Enterprise, PowerStoreT OS, and PowerScale OneFS. The advisory identified affected version thresholds and urged customers to keep products updated.
Dell Technologies released security updates for one critical and six high-severity vulnerabilities affecting Dell Cloud Disaster Recovery, Dell PowerProtect One, and Dell PowerProtect Cyber Recovery. The flaws could allow remote attackers to execute arbitrary code, cause denial of service, bypass authentication, or access confidential information.
Italy's ACN reported a high-severity Security Restrictions Bypass vulnerability affecting Dell ThinOS 10 versions earlier than 2605_10.2518. The notice said a local low-privilege attacker could gain unauthorized access and recommended updating according to Dell's bulletin.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
4 references tracked. Mallory keeps watching after this page renders.
acn.gov.it
Open sourceacn.gov.it
Open sourcecirt.gy
Open sourcemalware.news
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Dell issued security advisory **`AV26-821`** warning that multiple vulnerabilities affect several product lines, including **PowerFlex appliance**, **PowerFlex Rack**, **PowerFlex Software**, **Dell Client Platform for Multiple AMD BIOS**, **Dell Client Platform BIOS for 2026.3 IPU**, and **Dell VPLEX**. National cyber authorities, including the **Canadian Centre for Cyber Security** and **CIRT.GY**, republished the notice and highlighted that specific affected version thresholds apply across multiple PowerFlex offerings. The advisory material does not disclose CVE identifiers or active exploitation details in the available summaries, but it directs organizations to Dell’s security portal for product-specific guidance and remediation updates. Administrators were urged to review the relevant Dell advisories, identify impacted versions in their environments, and apply vendor fixes or updates as they become available to reduce exposure across storage infrastructure and client platform BIOS deployments.
Aug 17, 2026
Dell released multiple security advisories covering vulnerabilities across a broad set of enterprise infrastructure products, and the Canadian Centre for Cyber Security urged organizations to review the notices and apply updates. The affected technologies span storage, networking, data protection, and server platforms, including **Connectrix Switches and Directors**, **AMD-based PowerEdge Servers**, **Dell Command | Update** versions prior to `5.7.0`, **PowerProtect Data Domain**, and **Dell Storage Manager - Replay Manager for Microsoft Servers** versions prior to `8.0.3`. Additional advisories also affected **Data Protection Advisor**, **Dell EMC Isilon OneFS**, **Dell EMC PowerScale**, **Dell Networking OS10**, **PowerProtect DP Series Appliance**, **Elastic Cloud Storage**, **ObjectScale**, and several **PowerSwitch** models. The Canadian notice linked Dell advisories including `DSA-2026-041`, `DSA-2026-171`, `DSA-2026-058`, and `DSA-2026-190`, and characterized the activity as a vendor patch and mitigation effort rather than evidence of active exploitation.
Jun 29, 2026
Dell published security advisories for vulnerabilities affecting **Dell Data Lakehouse** and **Dell Enterprise SONiC Distribution**, prompting the Canadian Centre for Cyber Security to urge organizations to review the notices and apply updates. The affected versions are Dell Data Lakehouse **prior to 1.8.0.1** and Dell Enterprise SONiC Distribution **prior to 4.6.0**, with the issues documented in advisories **`DSA-2026-291`** and **`DSA-2026-290`**. Dell’s broader security advisories portal shows the company continuing to issue fixes across a wide range of products and recommending customers run the latest available software and deploy security updates as early as possible. In addition to the Data Lakehouse and SONiC notices highlighted by the Cyber Centre, Dell’s portal lists other recent advisories covering products such as Dell Automation Platform, Dell Container Storage Modules, Dell ThinOS 10, and Dell Client Platform systems, underscoring ongoing exposure to both product-specific and third-party component vulnerabilities.
Jul 13, 2026