Critical severity · published Oct 6, 2026
CVE-2026-82162
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability
9.8
CVSS
0.3%
EPSS
No
On KEV
Description
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Command | Configure (DCC) · Dell
before 5.2.3.35 · source: vendor
CO
Command|configure · Dell
before 5.2.3.35 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82162
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82162
vendor-advisory
https://www.dell.com/support/kbdoc/en-us/000502471/dsa-2026-378-security-update-for-dell-command-configure-for-multiple-vulnerabilities
More from Command | Configure (DCC)
5.5
CVE-2026-103778
Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability
5.5
CVE-2026-70414
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability