Dell has released a critical security update for its Dell System Update (DSU) software, bringing it to version 2.3.0.0. The update addresses several vulnerabilities, including a high-severity flaw identified as CVE-2026-86360.
The vulnerability stems from an improper limitation of a pathname to a restricted directory, commonly known as path traversal. This flaw affects all DSU versions released prior to 2.3.0.0.
The security gap allows an unauthenticated remote attacker to gain filesystem access and execute arbitrary code with root privileges. This could lead to a complete compromise of both the application and the underlying operating system.
Dell advises all customers to update their DSU software to the latest version immediately to mitigate these risks.
