CVE-2026-49811CWE-732

CVE-2026-49811

High · published September 22, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00135 · 2.7th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-09-22T00:17Z
References (1)
https://www.dell.com/support/kbdoc/en-us/000502473/dsa-2026-380-security-update-for-dell-command-monitor-dcm-for-an-incorrect-permission-assignment-for-critical-resource-vulnerability · [email protected]
EPSS history
Timeline
  • 23 SEP 03:46Z
    EPSS moved — → 0%
    epss
  • 21 SEP 19:38Z
    Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability
    cvelistv5