DSA-2026-024: Security Update for Dell NetWorker Multiple Third Party Component Vulnerabilities

Shrnutí: Dell NetWorker remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Tento článek se vztahuje na Tento článek se nevztahuje na Tento článek není vázán na žádný konkrétní produkt. V tomto článku nejsou uvedeny všechny verze produktu.
Podívejte se na další zdroje

Vliv

Critical

Podrobnosti

Third-party Component CVEs More Information
Angus Mail CVE-2025-7962 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Apache Commons Configuration CVE-2025-46392 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Apache Commons Lang CVE-2025-48924 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Apache CXF CVE-2024-29736, CVE-2024-32007, CVE-2025-23184, CVE-2024-41172, CVE-2025-48913 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Apache HttpClient CVE-2020-13956, CVE-2014-3577, CVE-2015-5262, CVE-2012-5783 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Apache Tomcat CVE-2025-31651, CVE-2025-31650, CVE-2025-48989 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
FasterXML Jackson‑databind CVE-2023-35116 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
QOS.CH Logback CVE-2025-11226 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Spring Framework CVE-2025-41242, CVE-2025-41254, CVE-2025-22233, CVE-2025-41234 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
Spring Security CVE-2025-41248, CVE-2025-22228 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

 

Společnost Dell Technologies všem zákazníkům doporučuje vzít v úvahu základní hodnocení CVSS i všechna související hodnocení v daném čase a prostředí, která mohou mít vliv na potenciální závažnost dané konkrétní bezpečnostní hrozby.

Dotčené produkty a náprava

CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2024-29736, CVE-2024-32007, CVE-2025-23184, CVE-2024-41172, CVE-2020-13956, CVE-2014-3577, CVE-2015-5262, CVE-2012-5783, CVE-2023-35116, CVE-2025-7962, CVE-2025-48913,  CVE-2025-11226, CVE-2025-41242, CVE-2025-41254, CVE-2025-22233, CVE-2025-41234, CVE-2025-48924, CVE-2025-46392, CVE-2025-41248, CVE-2025-22228 NetWorker NetWorker File-Level Recovery (FLR) Versions 19.9 through 19.13.0.2 Version 19.14 or later NetWorker Downloads Area
CVE-2024-29736, CVE-2024-32007, CVE-2025-23184, CVE-2024-41172, CVE-2020-13956, CVE-2014-3577, CVE-2015-5262, CVE-2012-5783, CVE-2023-35116, CVE-2025-7962, CVE-2025-48913,  CVE-2025-11226, CVE-2025-41242, CVE-2025-41254, CVE-2025-22233, CVE-2025-41234, CVE-2025-48924, CVE-2025-46392, CVE-2025-41248, CVE-2025-48989, CVE-2025-22228, CVE-2025-31651, CVE-2025-31650, CVE-2025-48989 NetWorker NetWorker vCenter User Interface (VCUI) Versions 19.9 through 19.13.0.2 Version 19.14 or later NetWorker Downloads Area

 

CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2024-29736, CVE-2024-32007, CVE-2025-23184, CVE-2024-41172, CVE-2020-13956, CVE-2014-3577, CVE-2015-5262, CVE-2012-5783, CVE-2023-35116, CVE-2025-7962, CVE-2025-48913,  CVE-2025-11226, CVE-2025-41242, CVE-2025-41254, CVE-2025-22233, CVE-2025-41234, CVE-2025-48924, CVE-2025-46392, CVE-2025-41248, CVE-2025-22228 NetWorker NetWorker File-Level Recovery (FLR) Versions 19.9 through 19.13.0.2 Version 19.14 or later NetWorker Downloads Area
CVE-2024-29736, CVE-2024-32007, CVE-2025-23184, CVE-2024-41172, CVE-2020-13956, CVE-2014-3577, CVE-2015-5262, CVE-2012-5783, CVE-2023-35116, CVE-2025-7962, CVE-2025-48913,  CVE-2025-11226, CVE-2025-41242, CVE-2025-41254, CVE-2025-22233, CVE-2025-41234, CVE-2025-48924, CVE-2025-46392, CVE-2025-41248, CVE-2025-48989, CVE-2025-22228, CVE-2025-31651, CVE-2025-31650, CVE-2025-48989 NetWorker NetWorker vCenter User Interface (VCUI) Versions 19.9 through 19.13.0.2 Version 19.14 or later NetWorker Downloads Area

 

Notes:

  1. The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
  2. Customers on any supported versions/releases listed in the ‘Affected Products and Remediation’ section can upgrade directly to the remediated 19.14 release. Version 19.13.0.3, released on February 20, 2026, is provided for environments or usage scenarios that require a lower remediated release.
  3. Unless specified as impacted, the term “later releases” encompasses all NetWorker releases, under standard support, that are of a higher minor or major version than the specified release. Dell recommends that you always upgrade to the latest release/version for your product.
  4. Platforms: Windows & Linux (All variants and flavors are impacted). 

Zástupná řešení a opatření pro zmírnění rizik

None

Historie změn

RevisionDateDescription
1.02026-02-09Initial Release
2.02026-02-12Minor update to map CVEs to the respective NetWorker components
2.02026-03-11Minor update announcing the release of version 19.13.0.3. See the Additional Information section.

 

Související informace

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Právní upozornění

Dotčené produkty

NetWorker Family, NetWorker
Vlastnosti článku
Číslo článku: 000425759
Typ článku: Dell Security Advisory
Poslední úprava: 11 Mar 2026
Najděte odpovědi na své otázky od ostatních uživatelů společnosti Dell
Služby podpory
Zkontrolujte, zda se na vaše zařízení vztahují služby podpory.