Loading story…
Dell disclosed vulnerabilities affecting PowerEdge Server firmware for Intel processors and AppSync. The firmware issue is covered by advisory DSA-2026-356, while AppSync vulnerabilities are detailed in DSA-2026-165 and affect versions 4.6.0.4 and earlier as well as 4.6.1.0 and earlier.
The Canadian Centre for Cyber Security and Guyana National CIRT advised organizations running the affected Dell products to review the relevant Dell advisories, identify exposed systems across applicable PowerEdge models and firmware versions, and apply available updates.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security published AV26-863, advising users and administrators to review Dell's security advisories and apply available updates.
As of August 28, Dell reported vulnerabilities affecting Dell PowerEdge Server firmware for Intel processors and Dell AppSync versions 4.6.0.4 and 4.6.1.0 and earlier. Dell's DSA-2026-165 addresses the AppSync vulnerabilities.
Dell issued DSA-2026-356 to address a vulnerability affecting PowerEdge Server firmware for Intel processors across multiple firmware versions and models.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
cirt.gy
Open sourcemalware.news
Open sourcecyber.gc.ca
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Dell released multiple security advisories covering vulnerabilities across a broad set of enterprise infrastructure products, and the Canadian Centre for Cyber Security urged organizations to review the notices and apply updates. The affected technologies span storage, networking, data protection, and server platforms, including **Connectrix Switches and Directors**, **AMD-based PowerEdge Servers**, **Dell Command | Update** versions prior to `5.7.0`, **PowerProtect Data Domain**, and **Dell Storage Manager - Replay Manager for Microsoft Servers** versions prior to `8.0.3`. Additional advisories also affected **Data Protection Advisor**, **Dell EMC Isilon OneFS**, **Dell EMC PowerScale**, **Dell Networking OS10**, **PowerProtect DP Series Appliance**, **Elastic Cloud Storage**, **ObjectScale**, and several **PowerSwitch** models. The Canadian notice linked Dell advisories including `DSA-2026-041`, `DSA-2026-171`, `DSA-2026-058`, and `DSA-2026-190`, and characterized the activity as a vendor patch and mitigation effort rather than evidence of active exploitation.
Jun 29, 2026
Dell published multiple security advisories covering vulnerabilities across **NativeEdge Orchestrator**, **iDRAC Tools**, **PowerEdge**, **PowerScale**, and **PowerStore**, prompting the Canadian Centre for Cyber Security to issue advisory **AV26-598**. The notice says **Dell NativeEdge Orchestrator** versions prior to `4.2.0.0` and **iDRAC Tools** versions prior to `11.4.1.0` are affected, while multiple versions of **PowerEdge**, **PowerScale**, and **PowerStore** also require attention. The Cyber Centre urged administrators to review Dell’s advisories and apply the necessary updates. Referenced notices include **DSA-2026-256** for **Dell NativeEdge Orchestrator**, **DSA-2026-237** for **Dell PowerScale OneFS** third-party component vulnerabilities, and **DSA-2026-273** for **Dell PowerStore T**, indicating that the remediation effort spans infrastructure management, storage, and server platforms.
Jul 12, 2026
Dell disclosed vulnerabilities across enterprise management, server, backup, data-protection, and storage offerings. Affected products include **OpenManage Network Integration**, **iDRAC9**, **iDRAC10**, **PowerEdge Server for Intel 2026**, the **OpenManage Python SDK**, **Avamar**, **NetWorker Virtual Edition**, **PowerProtect DP Series Appliance**, **Integrated Data Protection Appliance**, and **PowerScale OneFS**. Dell published affected-version ranges and fixed-version thresholds for OpenManage Network Integration, iDRAC9, iDRAC10, and the OpenManage Python SDK; other listed products have multiple affected versions or models. The Canadian Centre for Cyber Security and Guyana National CIRT advised administrators to review Dell’s security advisories and apply applicable updates as they become available. The notices do not disclose CVE identifiers, vulnerability classes, severity ratings, exploitation status, indicators of compromise, or complete remediation versions for several affected products, making vendor advisory review and asset-specific patch validation necessary.
Sep 9, 2026