Loading story…
Dell issued security advisories DSA-2026-385, DSA-2026-404, DSA-2026-408, and DSA-2026-410 for multiple vulnerabilities affecting Rugged Control Center, Secure Connect Gateway Policy Manager, ThinOS 10, and Trusted Device Client. The issues affect Rugged Control Center versions earlier than 5.2.206, Secure Connect Gateway Policy Manager versions earlier than 5.36.00.16, ThinOS 10 releases before SecurityAddon_2605.10.2766_T10, and Trusted Device Client versions before 8.1.359.0.
The Trusted Device Client flaws include an incorrect permission assignment for a critical resource, which could expose affected endpoints to unauthorized access or misuse of protected resources depending on local conditions. The Canadian Centre for Cyber Security and Guyana National CIRT urged administrators to review Dell’s advisories, identify affected deployments, and apply the relevant vendor updates promptly.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security issued advisory AV26-966 covering the Dell product vulnerabilities and advised users and administrators to review Dell's advisories and apply available updates.
Dell reported multiple vulnerabilities affecting Rugged Control Center before 5.2.206, Secure Connect Gateway Policy Manager before 5.36.00.16, ThinOS 10 before SecurityAddon_2605.10.2766_T10, and Trusted Device Client before 8.1.359.0. The issues are addressed in advisories DSA-2026-410, DSA-2026-385, DSA-2026-404, and DSA-2026-408, respectively; the Trusted Device Client issue is an incorrect permission assignment for a critical resource.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourcecirt.gy
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Dell issued security advisory **AV26-843** covering vulnerabilities across multiple product lines and urging customers to apply available software and firmware updates. National cyber agencies and incident response teams in Canada, Italy, and Guyana amplified the notice, highlighting affected enterprise, endpoint, storage, networking, and thin-client offerings such as **Alienware Command Center**, **Dell Command Update**, **OpenManage Enterprise**, **PowerStoreT OS**, and **PowerScale OneFS**. One of the disclosed issues is a **high-severity** flaw in **Dell ThinOS 10** classified as a **Security Restrictions Bypass**. According to the advisory, a local low-privileged attacker could exploit the vulnerability to gain unauthorized access on affected systems, with versions earlier than **`2605_10.2518`** identified as vulnerable; administrators were advised to review Dell’s bulletin and update impacted products to the fixed versions listed there.
Aug 27, 2026
Dell disclosed vulnerabilities across enterprise management, server, backup, data-protection, and storage offerings. Affected products include **OpenManage Network Integration**, **iDRAC9**, **iDRAC10**, **PowerEdge Server for Intel 2026**, the **OpenManage Python SDK**, **Avamar**, **NetWorker Virtual Edition**, **PowerProtect DP Series Appliance**, **Integrated Data Protection Appliance**, and **PowerScale OneFS**. Dell published affected-version ranges and fixed-version thresholds for OpenManage Network Integration, iDRAC9, iDRAC10, and the OpenManage Python SDK; other listed products have multiple affected versions or models. The Canadian Centre for Cyber Security and Guyana National CIRT advised administrators to review Dell’s security advisories and apply applicable updates as they become available. The notices do not disclose CVE identifiers, vulnerability classes, severity ratings, exploitation status, indicators of compromise, or complete remediation versions for several affected products, making vendor advisory review and asset-specific patch validation necessary.
Sep 9, 2026
Dell published security advisories for vulnerabilities affecting **Dell Data Lakehouse** and **Dell Enterprise SONiC Distribution**, prompting the Canadian Centre for Cyber Security to urge organizations to review the notices and apply updates. The affected versions are Dell Data Lakehouse **prior to 1.8.0.1** and Dell Enterprise SONiC Distribution **prior to 4.6.0**, with the issues documented in advisories **`DSA-2026-291`** and **`DSA-2026-290`**. Dell’s broader security advisories portal shows the company continuing to issue fixes across a wide range of products and recommending customers run the latest available software and deploy security updates as early as possible. In addition to the Data Lakehouse and SONiC notices highlighted by the Cyber Centre, Dell’s portal lists other recent advisories covering products such as Dell Automation Platform, Dell Container Storage Modules, Dell ThinOS 10, and Dell Client Platform systems, underscoring ongoing exposure to both product-specific and third-party component vulnerabilities.
Jul 13, 2026