DSA-2026-246: Security Update for Dell UCC Edge Multiple Vulnerabilities
Summary: Dell UCC Edge remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Bu makale şunlar için geçerlidir:
Bu makale şunlar için geçerli değildir:
Bu makale, belirli bir ürüne bağlı değildir.
Bu makalede tüm ürün sürümleri tanımlanmamıştır.
Impact
High
Details
| Third-party Component | CVEs | ; More Information |
| Python; | CVE-2025-0938, CVE-2025-47273, CVE-2025-13836; | https://nvd.nist.gov/vuln/search  |
| XZ Utils; | CVE-2025-31115 | https://nvd.nist.gov/vuln/search |
| urllib3; | CVE-2025-50181 | https://nvd.nist.gov/vuln/search |
| ESE; | CVE-2026-26950 | https://nvd.nist.gov/vuln/search |
| Linux Kernel | CVE-2026-31431, CVE-2026-43284, CVE-2026-43500, CVE-2026-46300, CVE-2026-46333 | https://nvd.nist.gov/vuln/search |
| OpenSSH | CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | https://nvd.nist.gov/vuln/search |
| Kubernetes | CVE-1999-0511 | https://nvd.nist.gov/vuln/search |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-49503 | Dell UCC Edge, versions prior to 3.0.2, contains an Insufficiently Protected Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. | 5.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| CVE-2026-49504 | Dell UCC Edge, versions prior to 3.0.2, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-49503 | Dell UCC Edge, versions prior to 3.0.2, contains an Insufficiently Protected Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. | 5.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| CVE-2026-49504 | Dell UCC Edge, versions prior to 3.0.2, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Etkilenen Ürünler ve Düzeltme
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell UCC Edge | Versions prior to 3.0.2 |
Version 3.0.2 or later
|
Support for UCC Edge | Drivers & Downloads | Dell US |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell UCC Edge | Versions prior to 3.0.2 |
Version 3.0.2 or later
|
Support for UCC Edge | Drivers & Downloads | Dell US |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Geçici Çözümler ve Risk Azaltma
None
Revision History
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-08-19 | Initial |
Related Information
Yasal Uyarı
Makale Özellikleri
Article Number: 000501633
Article Type: Dell Security Advisory
Son Değiştirme: 19 Ağu 2026
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.