Loading story…
Dell released security advisories DSA-2026-379, DSA-2026-380, and DSA-2026-381 for vulnerabilities affecting endpoint-management and support software. The issues include potential credential theft through PowerShell event logs in Dell Command | PowerShell Provider, incorrect permissions on a critical resource in Dell Command | Monitor, and an unquoted search-path or element flaw affecting Dell SupportAssist for PCs, Dell Optimizer, Dell Trusted Device, and Dell Command | Update.
Organizations should update Dell Command | PowerShell Provider to version 2.10.2 or later, Dell Command | Monitor to version 10.13.2 or later, and Dell Inventory Collector Client to version 15.0.0 or later where deployed. The Canadian Centre for Cyber Security and Guyana National CIRT urged administrators to review the Dell advisories and apply the relevant fixes.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security published advisory AV26-959, referencing Dell advisories DSA-2026-379, DSA-2026-380, and DSA-2026-381. It advised administrators to review the Dell advisories and apply available updates.
As of September 21, 2026, Dell Command | PowerShell Provider, Dell Command | Monitor, Dell Inventory Collector Client, and several Dell support and management products were identified as affected. The issues included credential theft through PowerShell event logs, incorrect permissions on a critical resource, and an unquoted search path or element vulnerability.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
cirt.gy
Open sourcemalware.news
Open sourcecyber.gc.ca
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Dell published multiple security advisories covering vulnerabilities across **NativeEdge Orchestrator**, **iDRAC Tools**, **PowerEdge**, **PowerScale**, and **PowerStore**, prompting the Canadian Centre for Cyber Security to issue advisory **AV26-598**. The notice says **Dell NativeEdge Orchestrator** versions prior to `4.2.0.0` and **iDRAC Tools** versions prior to `11.4.1.0` are affected, while multiple versions of **PowerEdge**, **PowerScale**, and **PowerStore** also require attention. The Cyber Centre urged administrators to review Dell’s advisories and apply the necessary updates. Referenced notices include **DSA-2026-256** for **Dell NativeEdge Orchestrator**, **DSA-2026-237** for **Dell PowerScale OneFS** third-party component vulnerabilities, and **DSA-2026-273** for **Dell PowerStore T**, indicating that the remediation effort spans infrastructure management, storage, and server platforms.
Jul 12, 2026
Dell disclosed vulnerabilities across enterprise management, server, backup, data-protection, and storage offerings. Affected products include **OpenManage Network Integration**, **iDRAC9**, **iDRAC10**, **PowerEdge Server for Intel 2026**, the **OpenManage Python SDK**, **Avamar**, **NetWorker Virtual Edition**, **PowerProtect DP Series Appliance**, **Integrated Data Protection Appliance**, and **PowerScale OneFS**. Dell published affected-version ranges and fixed-version thresholds for OpenManage Network Integration, iDRAC9, iDRAC10, and the OpenManage Python SDK; other listed products have multiple affected versions or models. The Canadian Centre for Cyber Security and Guyana National CIRT advised administrators to review Dell’s security advisories and apply applicable updates as they become available. The notices do not disclose CVE identifiers, vulnerability classes, severity ratings, exploitation status, indicators of compromise, or complete remediation versions for several affected products, making vendor advisory review and asset-specific patch validation necessary.
Sep 9, 2026
Dell released multiple security advisories covering vulnerabilities across a broad set of enterprise infrastructure products, and the Canadian Centre for Cyber Security urged organizations to review the notices and apply updates. The affected technologies span storage, networking, data protection, and server platforms, including **Connectrix Switches and Directors**, **AMD-based PowerEdge Servers**, **Dell Command | Update** versions prior to `5.7.0`, **PowerProtect Data Domain**, and **Dell Storage Manager - Replay Manager for Microsoft Servers** versions prior to `8.0.3`. Additional advisories also affected **Data Protection Advisor**, **Dell EMC Isilon OneFS**, **Dell EMC PowerScale**, **Dell Networking OS10**, **PowerProtect DP Series Appliance**, **Elastic Cloud Storage**, **ObjectScale**, and several **PowerSwitch** models. The Canadian notice linked Dell advisories including `DSA-2026-041`, `DSA-2026-171`, `DSA-2026-058`, and `DSA-2026-190`, and characterized the activity as a vendor patch and mitigation effort rather than evidence of active exploitation.
Jun 29, 2026