Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access

Dell warns of a critical path traversal vulnerability (CVE-2026-86360, CVSS 9.6) in System Update (DSU) that can allow unauthenticated attackers to execute arbitrary code with root privileges on unpatched PowerEdge servers; four additional DSU flaws (privilege escalation, improper certificate validation, and another path traversal) were also fixed. Dell recommends upgrading to System Update 2.3.0.0 or later immediately, and reports no observed active exploitation so far.