
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2026-24509 is an Improper Access Control vulnerability (CWE-284) in Dell Alienware Command Center (AWCC) that allows a low-privileged local attacker to cause a Denial of Service condition. All AWCC versions prior to 6.12.24.0 are affected. The vulnerability was published on March 11, 2026, with a patch released shortly after. It carries a CVSS v3.1 base score of 5.5 (Medium) (Dell Advisory).
The vulnerability is classified as CWE-284 (Improper Access Control), meaning AWCC fails to properly restrict access to certain resources or operations for low-privileged users. An attacker with local, low-privileged access can exploit this flaw without requiring user interaction or elevated privileges, and the attack complexity is low. The exploitation path leads to a Denial of Service, with potential limited integrity impact noted in some scoring assessments (Dell Advisory).
Successful exploitation of this vulnerability allows a low-privileged local attacker to disrupt the availability of the Dell Alienware Command Center application, resulting in a Denial of Service condition. There is no confidentiality impact, and integrity impact is assessed as none to limited depending on the scoring source. The scope is limited to the local system and does not facilitate lateral movement or remote exploitation (Dell Advisory).
Dell has released a patched version of Alienware Command Center (AWCC) addressing this vulnerability. Users should upgrade to version 6.12.24.0 or later as soon as possible. No specific configuration-based workarounds have been published; upgrading to the fixed version is the recommended and primary remediation step (Dell Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."