Dell issues an alert for a critical vulnerability in its Dell System Update (DSU) command-line interface, urging customers to apply a patch as soon as possible. Multiple outlets report that the flaw can allow an unauthenticated remote attacker to execute arbitrary code with root privileges.
The problem is identified as CVE-2026-86360, described as a path traversal vulnerability. Help Net Security states it affects DSU versions prior to 2.3.0.0 and assigns it a CVSS base score of 9.6. DSU is used by enterprise IT teams to deploy driver, BIOS, and firmware updates for Dell PowerEdge servers.
While both reports focus on the same DSU issue and urgency to patch, they differ mainly in wording and emphasis. Bleeping Computer highlights the need to update the DSU CLI deployment tool, while Help Net Security adds more specifics about the vulnerability type, affected versions, and CVSS rating. Both frame the risk as remote code execution with elevated privileges if systems are unpatched.
