Product:
Device Management Agent
Summary
Dell Device Management Agent contains an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. This could allow unauthorized access to sensitive information or system controls.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-26949 |
Exploitation
To exploit this vulnerability, an attacker with local access would need to leverage their low privileges to gain elevated access. This could involve manipulating the authorization mechanisms within the Device Management Agent to perform actions that should be restricted, thereby gaining higher privileges than intended.
Affected Products
- Device Management Agent: Versions prior to 26.02 are affected by the Incorrect Authorization vulnerability.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of the Device Management Agent. Regularly applying security updates and monitoring access controls can also help prevent exploitation of similar vulnerabilities in the future.