DSA-2026-246: Security Update for Dell UCC Edge Multiple Vulnerabilities
摘要: Dell UCC Edge remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
影响
High
详情
| Third-party Component | CVEs | ; More Information |
| Python; | CVE-2025-0938, CVE-2025-47273, CVE-2025-13836; | https://nvd.nist.gov/vuln/search  |
| XZ Utils; | CVE-2025-31115 | https://nvd.nist.gov/vuln/search |
| urllib3; | CVE-2025-50181 | https://nvd.nist.gov/vuln/search |
| ESE; | CVE-2026-26950 | https://nvd.nist.gov/vuln/search |
| Linux Kernel | CVE-2026-31431, CVE-2026-43284, CVE-2026-43500, CVE-2026-46300, CVE-2026-46333 | https://nvd.nist.gov/vuln/search |
| OpenSSH | CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | https://nvd.nist.gov/vuln/search |
| Kubernetes | CVE-1999-0511 | https://nvd.nist.gov/vuln/search |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-49503 | Dell UCC Edge, versions prior to 3.0.2, contains an Insufficiently Protected Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. | 5.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| CVE-2026-49504 | Dell UCC Edge, versions prior to 3.0.2, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-49503 | Dell UCC Edge, versions prior to 3.0.2, contains an Insufficiently Protected Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. | 5.3 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| CVE-2026-49504 | Dell UCC Edge, versions prior to 3.0.2, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
受影响的产品和补救措施
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell UCC Edge | Versions prior to 3.0.2 |
Version 3.0.2 or later
|
Support for UCC Edge | Drivers & Downloads | Dell US |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell UCC Edge | Versions prior to 3.0.2 |
Version 3.0.2 or later
|
Support for UCC Edge | Drivers & Downloads | Dell US |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
解决方法和缓解措施
None
修订历史记录
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-08-19 | Initial |
相关信息
法律免责声明
文章属性
文章编号: 000501633
文章类型: Dell Security Advisory
上次修改时间: 19 8月 2026
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。