DSA-2026-246: Security Update for Dell UCC Edge Multiple Vulnerabilities
요약: Dell UCC Edge remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
이 문서는 다음에 적용됩니다.
이 문서는 다음에 적용되지 않습니다.
이 문서는 특정 제품과 관련이 없습니다.
모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
영향
High
세부 정보
| Third-party Component | CVEs | ; More Information |
| Python; | CVE-2025-0938, CVE-2025-47273, CVE-2025-13836; | https://nvd.nist.gov/vuln/search  |
| XZ Utils; | CVE-2025-31115 | https://nvd.nist.gov/vuln/search |
| urllib3; | CVE-2025-50181 | https://nvd.nist.gov/vuln/search |
| ESE; | CVE-2026-26950 | https://nvd.nist.gov/vuln/search |
| Linux Kernel | CVE-2026-31431, CVE-2026-43284, CVE-2026-43500, CVE-2026-46300, CVE-2026-46333 | https://nvd.nist.gov/vuln/search |
| OpenSSH | CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | https://nvd.nist.gov/vuln/search |
| Kubernetes | CVE-1999-0511 | https://nvd.nist.gov/vuln/search |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-49503 | Dell UCC Edge, versions prior to 3.0.2, contains an Insufficiently Protected Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. | 5.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| CVE-2026-49504 | Dell UCC Edge, versions prior to 3.0.2, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-49503 | Dell UCC Edge, versions prior to 3.0.2, contains an Insufficiently Protected Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. | 5.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| CVE-2026-49504 | Dell UCC Edge, versions prior to 3.0.2, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
영향을 받는 제품 및 문제 해결
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell UCC Edge | Versions prior to 3.0.2 |
Version 3.0.2 or later
|
Support for UCC Edge | Drivers & Downloads | Dell US |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell UCC Edge | Versions prior to 3.0.2 |
Version 3.0.2 or later
|
Support for UCC Edge | Drivers & Downloads | Dell US |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
해결 방법 및 완화 방안
None
개정 내역
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-08-19 | Initial |
관련 정보
법적 고지 사항
문서 속성
문서 번호: 000501633
문서 유형: Dell Security Advisory
마지막 수정 시간: 19 8월 2026
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.