{"id":"CVE-2026-63697","published":"2026-10-06T19:18:15.447","lastModified":"2026-10-09T02:17:04.053","description":"Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.","cvssScore":7.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515843/dsa-2026-324-security-update-for-dell-system-update-dsu-vulnerabilities","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Dell System Update's improper certificate validation allows attackers with remote access and high privileges to potentially execute arbitrary code on affected systems. This vulnerability undermines the security of system updates by accepting invalid certificates, creating a potential backdoor for malicious actors.","exploitability":"Exploitation requires a high-privileged attacker with remote access to the system, making it moderately difficult but not impossible to achieve, with the main precondition being successful remote code execution capability.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on Dell systems running affected versions of System Update, potentially leading to full system compromise and lateral movement within the network.","remediation":"Upgrade to version 2.3.0.0 or later to remediate the certificate validation flaw.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["certificate-validation","remote-execution","system-update","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:01:50.720Z"}}