CVE-2026-21420CWE-427

Dell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability

High · published February 23, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
4.0
In the wild
Unconfirmed
What it is

Dell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution and escalation of privileges.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00152 · 4.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-02-23T14:01Z
EPSS history
Timeline
  • 23 FEB 14:01Z
    Dell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path Element vulnerability
    cvelistv5