CVE-2026-58565: 
Dell Command Update vulnerability analysis and mitigation

CVE-2026-58565 is a Missing Authorization vulnerability in Dell Command Update (DCU) that allows a low-privileged local attacker to escalate privileges on affected systems. It affects all DCU versions prior to 5.7.1 and was disclosed on August 19, 2026, via Dell's security advisory DSA-2026-309. The vulnerability carries a CVSS v3.1 base score of 8.8 (High), assigned by Dell (GitHub Advisory, Dell Advisory).

The vulnerability is classified as CWE-862 (Missing Authorization), meaning the application fails to perform adequate authorization checks when a low-privileged user attempts to access restricted resources or perform privileged actions within DCU. The attack vector is local, requires low privileges, no user interaction, and has a changed scope — indicating that successful exploitation can affect components beyond DCU itself. No public technical write-up or proof-of-concept code has been identified at this time (GitHub Advisory, Dell Advisory).

Successful exploitation allows a low-privileged local user to escalate their privileges to a higher level, potentially gaining full control over the affected system. The CVSS scoring reflects high impacts across confidentiality, integrity, and availability, meaning an attacker could read sensitive files, modify system configurations, and disrupt critical system functions. The changed scope indicates that the impact may extend beyond DCU itself to other system components or resources (GitHub Advisory, Dell Advisory).

As of the disclosure date, there is no known public proof-of-concept exploit and no evidence of in-the-wild exploitation. The EPSS score is reported as 0.0, reflecting a currently low probability of exploitation in the near term. The vulnerability has not been added to the CISA Known Exploited Vulnerabilities (KEV) catalog. Exploitation requires local access with at least low-level privileges, limiting the attack surface compared to remotely exploitable vulnerabilities (GitHub Advisory, Dell Advisory).

Dell has released version 5.7.1 of Dell Command Update (DCU) to address this vulnerability; users should upgrade immediately. As an interim measure, organizations should restrict local access to systems running vulnerable DCU versions, particularly limiting low-privileged user accounts. Additionally, monitoring for suspicious privilege escalation activity and auditing access logs for unauthorized DCU usage is recommended (Dell Advisory).