Dell System Update patch closes a path to root
Dell has released System Update 2.3.0.0 to fix five vulnerabilities. The lead flaw, CVE-2026-86360, is a path traversal issue rated 9.6. Dell says an unauthenticated remote attacker could potentially gain filesystem access and execute arbitrary code as root, compromising the application and operating system. The vendor vector includes user interaction. The advisory does not say the flaw is being exploited.
Upgrade and verify
Systems below 2.3.0.0 are affected. Upgrade to 2.3.0.0 or later, then confirm the installed version.
Four companion flaws have different local or privileged prerequisites but share the same upgrade. Treat them as one patch action, not identical attack paths.
Source: Dell security advisory, 1 October 2026.
