Dell: community verdicts

3 notable / known-exploited Dell CVEs the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Dell CVE, see NVD ↗.

Exploitation first, with newly exploited CVEs rising above old ones

CVE-2021-21551HIGH 8.8KEVEPSS 79%
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
CVE-2026-22769CRIT 10KEVEPSS 13%
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.
CVE-2020-11899MED 5.4KEVEPSS 18%
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.