CVE-2026-24502 - Vulnerability Analysis

Overview

Dell Command | Intel vPro Out of Band < 4.7.0 contains an uncontrolled search path element vulnerability caused by insecure search path handling, letting low privileged local attackers escalate privileges, exploit requires local access.

Severity & Score

Impact

Local attackers can escalate privileges, potentially gaining higher system access.

Mitigation

Update to version 4.7.0 or later.

References

• https://www.dell.com/support/kbdoc/en-us/000429179/dsa-2026-106

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 4, 2026

🟠 CVE-2026-24502 - High (8.8) Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-24502/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner