CVE-2026-58564: 
Dell Command Update vulnerability analysis and mitigation

CVE-2026-58564 is an Incorrect Default Permissions vulnerability (CWE-276) in Dell Command Update (DCU) that allows a low-privileged local attacker to gain unauthorized filesystem access. All DCU versions prior to 5.7.1 are affected. The vulnerability was published on August 19, 2026, with a patch available in version 5.7.1. It carries a CVSS v3.1 base score of 7.8 (High), assigned by Dell (Dell Advisory, GitHub Advisory).

The vulnerability stems from improper default file or directory permissions set during the installation of Dell Command Update, classified as CWE-276 (Incorrect Default Permissions). During installation, file permissions are configured in a way that allows low-privileged users to read, modify, or delete files that should be restricted to higher-privileged accounts. Exploitation requires only local access and low privileges, with no user interaction needed, making it straightforward for any authenticated local user to abuse the misconfigured permissions. No public proof-of-concept or detailed technical write-up has been identified at this time (Dell Advisory, GitHub Advisory).

Successful exploitation allows a low-privileged local attacker to read, modify, and delete arbitrary files on the filesystem with elevated permissions, resulting in high confidentiality, integrity, and availability impact. This could enable an attacker to tamper with DCU update mechanisms, potentially facilitating privilege escalation or persistence on the affected system. The scope is limited to the local system, but the ability to manipulate update-related files could be leveraged for further lateral movement or supply chain-style attacks within an enterprise environment (Dell Advisory, GitHub Advisory).

There is no known public proof-of-concept exploit and no evidence of in-the-wild exploitation at this time. The EPSS score is 0.0, indicating a currently low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported (GitHub Advisory, Dell Advisory).

Dell has released version 5.7.1 of Dell Command Update (DCU) to address this vulnerability; users should upgrade immediately. As interim mitigations, organizations should restrict local system access to trusted users only and audit file system permissions on directories associated with DCU installations. Reviewing and hardening access controls on DCU-related files and directories can reduce exposure until patching is complete (Dell Advisory).