CVE-2026-26034

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-26034", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2026-02-10T05:52:34.660Z", "datePublished": "2026-03-05T02:24:35.481Z", "dateUpdated": "2026-03-05T15:41:45.919Z"}, "containers": {"cna": {"affected": [{"vendor": "Dell Inc.", "product": "UPS Multi-UPS Management Console (MUMC)", "versions": [{"version": "01.06.0001 (A03)", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL."}], "problemTypes": [{"descriptions": [{"description": "Incorrect default permissions", "lang": "en-US", "cweId": "CWE-276", "type": "CWE"}]}], "references": [{"url": "https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3"}, {"url": "https://jvn.jp/en/jp/JVN56544509/"}], "tags": ["unsupported-when-assigned"], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_0": {"version": "3.0", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}, {"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "baseSeverity": "HIGH", "baseScore": 8.5, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2026-03-05T02:24:35.481Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-05T15:32:40.462825Z", "id": "CVE-2026-26034", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-05T15:41:45.919Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-26034", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-05T15:32:40.462825Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-05T15:32:41.472Z"}}], "cna": {"tags": ["unsupported-when-assigned"], "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 8.5, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Dell Inc.", "product": "UPS Multi-UPS Management Console (MUMC)", "versions": [{"status": "affected", "version": "01.06.0001 (A03)"}]}], "references": [{"url": "https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3"}, {"url": "https://jvn.jp/en/jp/JVN56544509/"}], "descriptions": [{"lang": "en", "value": "UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-276", "description": "Incorrect default permissions"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2026-03-05T02:24:35.481Z"}}}, "cveMetadata": {"cveId": "CVE-2026-26034", "state": "PUBLISHED", "dateUpdated": "2026-03-05T15:41:45.919Z", "dateReserved": "2026-02-10T05:52:34.660Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2026-03-05T02:24:35.481Z", "assignerShortName": "jpcert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "UPS Multi-UPS Management Console (MUMC)", "vendor": "Dell Inc.", "versions": [{"status": "affected", "version": "01.06.0001 (A03)"}]}], "source": "vultures@jpcert.or.jp"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dell:ups_multi-ups_management_console:01.06.0001_\\(a03\\):*:*:*:*:*:*:*", "matchCriteriaId": "6D712110-5CBE-465C-B83B-30ACA1CFF098", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [{"sourceIdentifier": "vultures@jpcert.or.jp", "tags": ["unsupported-when-assigned"]}], "descriptions": [{"lang": "en", "value": "UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL."}, {"lang": "es", "value": "UPS Multi-UPS Management Console (MUMC) versi\u00f3n 01.06.0001 (A03) contiene una vulnerabilidad de Permisos Predeterminados Incorrectos (CWE-276) que permite a un atacante ejecutar c\u00f3digo arbitrario con privilegios de SYSTEM al hacer que la aplicaci\u00f3n cargue una DLL especialmente dise\u00f1ada."}], "id": "CVE-2026-26034", "lastModified": "2026-06-17T10:25:38.200", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "vultures@jpcert.or.jp", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "vultures@jpcert.or.jp", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-26034", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-05T15:32:40.462825Z", "version": "2.0.3"}}]}, "published": "2026-03-05T03:15:54.540", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/jp/JVN56544509/"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-276"}], "source": "vultures@jpcert.or.jp", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-428"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "01.06.0001 (A03)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "UPS Multi-UPS Management Console (MUMC)", "source": "cna", "vendor": "Dell Inc."}, "product": "ups_multi-ups_management_console_(mumc)", "vendor": "dell_inc."}], "analysis": {"en": {"generated_at": "2026-04-16T12:58:05.159018+00:00", "value": {"mitigation_remediation": ["Download and apply the latest Dell UPS Multi-UPS Management Console update available from Dell support (driverid 038h3).", "Restart the UPS Multi-UPS Management Console to ensure the updated binaries are loaded.", "Restrict the console\u2019s application directory permissions to prevent unauthorized DLL loading and disable directory search if possible."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The Dell UPS Multi-UPS Management Console version 01.06.0001 (A03) is affected. The product is sold by Dell Inc. as the UPS Multi-UPS Management Console.", "description_and_impact": "An incorrect default permissions flaw in the Dell UPS Multi-UPS Management Console (MUMC) allows an attacker to load a specially crafted DLL. The vulnerability enables execution of arbitrary code with SYSTEM privileges, effectively providing full control over the host system. This is a classic remote code execution risk classified as CWE-276.", "risk_and_exploitability": "The CVSS score of 8.5 indicates high severity, yet the EPSS score is reported as less than 1%, suggesting a very low likelihood of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local or via the console\u2019s administrative interface, as the description references the application loading a DLL rather than a network-facing component."}}}}, "created": "2026-03-06T15:17:56.365131+00:00", "title": "Arbitrary Code Execution via Improper DLL Permissions in Dell UPS Console", "updated": "2026-04-16T13:00:11.091079+00:00", "vendors": ["dell_inc.", "dell_inc.$PRODUCT$ups_multi-ups_management_console_(mumc)"]}