Dell urges System Update patch for flaw enabling root access

Dell urged customers to update its System Update tool after identifying a critical vulnerability that could let an unauthenticated remote attacker execute code with root privileges on vulnerable PowerEdge servers. SecurityAffairs reported that CVE-2026-86360 has a CVSS severity score of 9.6 and affects versions before 2.3.0.0. The flaw allows attackers to access files outside a restricted directory, potentially compromising the application and underlying operating system. Enterprise IT teams use the tool to deploy BIOS, firmware and software updates. Dell recommends version 2.3.0.0 or later, which also addresses four other vulnerabilities. Dell has not reported active exploitation.