https://patchfirst.co/vendor/dell/New and newly exploited Dell CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-86400/CVE-2026-86400Wed, 28 Oct 2026 00:00:00 GMTDell · PowerProtect Data Domain. Not in CISA KEV. EPSS 0.9% (higher than 59.5% of CVEs). CVSS 9.8 CRITICAL. Priority 20.1 of 100.https://patchfirst.co/cve/CVE-2026-103780/CVE-2026-103780Wed, 28 Oct 2026 00:00:00 GMTDell · PowerProtect Data Domain. Not in CISA KEV. EPSS 0.8% (higher than 57.5% of CVEs). CVSS 9.8 CRITICAL. Priority 19.4 of 100.https://patchfirst.co/cve/CVE-2026-86384/CVE-2026-86384Wed, 28 Oct 2026 00:00:00 GMTDell · PowerProtect Data Domain. Not in CISA KEV. EPSS 0.5% (higher than 40.9% of CVEs). CVSS 9.8 CRITICAL. Priority 16.4 of 100.https://patchfirst.co/cve/CVE-2026-103792/CVE-2026-103792Wed, 28 Oct 2026 00:00:00 GMTDell · PowerProtect Data Domain Management Center. Not in CISA KEV. EPSS 0.4% (higher than 30.8% of CVEs). CVSS 9.6 CRITICAL. Priority 14.0 of 100.https://patchfirst.co/cve/CVE-2026-86397/CVE-2026-86397Wed, 28 Oct 2026 00:00:00 GMTDell · PowerProtect Data Domain. Not in CISA KEV. EPSS 0.3% (higher than 27.1% of CVEs). CVSS 9.8 CRITICAL. Priority 13.6 of 100.https://patchfirst.co/cve/CVE-2026-103799/CVE-2026-103799Wed, 28 Oct 2026 00:00:00 GMTDell · PowerProtect Data Domain Management Center. Not in CISA KEV. EPSS 0.3% (higher than 27.6% of CVEs). CVSS 9.6 CRITICAL. Priority 13.3 of 100.https://patchfirst.co/cve/CVE-2026-76779/CVE-2026-76779Fri, 09 Oct 2026 00:00:00 GMTDell · Secure Connect Gateway (SCG) Policy Manager. Not in CISA KEV. EPSS 0.3% (higher than 19.1% of CVEs). CVSS 9.8 CRITICAL. Priority 13.2 of 100.https://patchfirst.co/cve/CVE-2026-86360/CVE-2026-86360Tue, 06 Oct 2026 00:00:00 GMTDell · System Update. Not in CISA KEV. EPSS 0.6% (higher than 48.6% of CVEs). CVSS 9.6 CRITICAL. Priority 18.6 of 100.https://patchfirst.co/cve/CVE-2026-63688/CVE-2026-63688Tue, 06 Oct 2026 00:00:00 GMTDell · Dell Container Storage Modules (CSM). Not in CISA KEV. EPSS 0.5% (higher than 41.9% of CVEs). CVSS 10.0 CRITICAL. Priority 17.8 of 100.https://patchfirst.co/cve/CVE-2026-63692/CVE-2026-63692Tue, 06 Oct 2026 00:00:00 GMTDell · Container Storage Modules. Not in CISA KEV. EPSS 0.4% (higher than 36.4% of CVEs). CVSS 10.0 CRITICAL. Priority 16.7 of 100.https://patchfirst.co/cve/CVE-2026-61421/CVE-2026-61421Tue, 06 Oct 2026 00:00:00 GMTDell · Container Storage Modules. Not in CISA KEV. EPSS 0.3% (higher than 28% of CVEs). CVSS 9.8 CRITICAL. Priority 14.9 of 100.https://patchfirst.co/cve/CVE-2026-67269/CVE-2026-67269Tue, 06 Oct 2026 00:00:00 GMTDell · Container Storage Modules (CSM). Not in CISA KEV. EPSS 0.3% (higher than 26.8% of CVEs). CVSS 9.9 CRITICAL. Priority 14.7 of 100.https://patchfirst.co/cve/CVE-2026-82162/CVE-2026-82162Tue, 06 Oct 2026 00:00:00 GMTDell · Command | Configure (DCC). Not in CISA KEV. EPSS 0.3% (higher than 23.1% of CVEs). CVSS 9.8 CRITICAL. Priority 13.7 of 100.https://patchfirst.co/cve/CVE-2026-67273/CVE-2026-67273Tue, 06 Oct 2026 00:00:00 GMTDell · Container Storage Modules. Not in CISA KEV. EPSS 0.3% (higher than 21.1% of CVEs). CVSS 9.6 CRITICAL. Priority 13.4 of 100.https://patchfirst.co/cve/CVE-2026-63691/CVE-2026-63691Tue, 06 Oct 2026 00:00:00 GMTDell · Container Storage Modules. Not in CISA KEV. EPSS 0.2% (higher than 6.2% of CVEs). CVSS 9.6 CRITICAL. Priority 10.2 of 100.https://patchfirst.co/cve/CVE-2026-22769/CVE-2026-22769#kevWed, 18 Feb 2026 00:00:00 GMTDell · RecoverPoint for Virtual Machines (RP4VMs). In CISA KEV since 2026-02-18. ENISA EUVD lists it as exploited. EPSS 13.5% (higher than 96.4% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation. Priority 69.3 of 100.kevT1078T1068https://patchfirst.co/cve/CVE-2025-36604/CVE-2025-36604Mon, 04 Aug 2025 00:00:00 GMTDell · Unity. Not in CISA KEV. EPSS 66.6% (higher than 99.28% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. Priority 65.0 of 100.public-exploithttps://patchfirst.co/cve/CVE-2022-24422/CVE-2022-24422Thu, 26 May 2022 00:00:00 GMTDell · Integrated Dell Remote Access Controller 9. Not in CISA KEV. EPSS 58.5% (higher than 99.1% of CVEs). CVSS 9.6 CRITICAL. Priority 27.2 of 100.https://patchfirst.co/cve/CVE-2021-21551/CVE-2021-21551#kevThu, 31 Mar 2022 00:00:00 GMTDell · dbutil Driver. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 79.6% (higher than 99.61% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 68.4 of 100.kevpublic-exploitT1068T1005T1499.004https://patchfirst.co/cve/CVE-2021-36276/CVE-2021-36276Mon, 09 Aug 2021 00:00:00 GMTDell · dbutil. Not in CISA KEV. EPSS 0.3% (higher than 18.9% of CVEs). CVSS 8.8 HIGH. Priority 44.9 of 100.https://patchfirst.co/cve/CVE-2020-5369/CVE-2020-5369Wed, 02 Sep 2020 00:00:00 GMTDell · Isilon OneFS. Not in CISA KEV. EPSS 1.2% (higher than 68.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 19.9 of 100.T1068https://patchfirst.co/cve/CVE-2020-5386/CVE-2020-5386Wed, 02 Sep 2020 00:00:00 GMTDell · Elastic Cloud Storage. Not in CISA KEV. EPSS 1.3% (higher than 69.5% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1005 Data from Local System. Priority 19.6 of 100.T1005https://patchfirst.co/cve/CVE-2020-5379/CVE-2020-5379Wed, 02 Sep 2020 00:00:00 GMTDell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.9% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.5 of 100.T1542.001https://patchfirst.co/cve/CVE-2020-5378/CVE-2020-5378Wed, 02 Sep 2020 00:00:00 GMTDell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.4 of 100.T1542.001https://patchfirst.co/cve/CVE-2020-5376/CVE-2020-5376Wed, 02 Sep 2020 00:00:00 GMTDell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.4 of 100.T1542.001https://patchfirst.co/cve/CVE-2020-5374/CVE-2020-5374Tue, 14 Jul 2020 00:00:00 GMTDell · OMIMSSC (OpenManage Integration for Microsoft System Center). Not in CISA KEV. EPSS 1.0% (higher than 64% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078.001 Default Accounts. Priority 19.0 of 100.T1078.001https://patchfirst.co/cve/CVE-2020-5373/CVE-2020-5373Tue, 14 Jul 2020 00:00:00 GMTDell · OMIMSSC (OpenManage Integration for Microsoft System Center). Not in CISA KEV. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1005 Data from Local System. Priority 19.0 of 100.T1005https://patchfirst.co/cve/CVE-2020-5366/CVE-2020-5366Thu, 09 Jul 2020 00:00:00 GMTDell · Integrated Dell Remote Access Controller (iDRAC). Not in CISA KEV. EPSS 1.8% (higher than 78.6% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 20.7 of 100.T1190T1005https://patchfirst.co/cve/CVE-2020-5371/CVE-2020-5371Mon, 06 Jul 2020 00:00:00 GMTDell · Isilon OneFS. Not in CISA KEV. EPSS 1.2% (higher than 66.9% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 19.0 of 100.T1068T1005https://patchfirst.co/cve/CVE-2020-5345/CVE-2020-5345Tue, 23 Jun 2020 00:00:00 GMTDell · Unisphere for PowerMax. Not in CISA KEV. EPSS 0.7% (higher than 54.8% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1565.001 Stored Data Manipulation; T1190 Exploit Public-Facing Application. Priority 15.4 of 100.T1565.001T1190https://patchfirst.co/cve/CVE-2020-5358/CVE-2020-5358Mon, 15 Jun 2020 00:00:00 GMTDell · Dell Encryption Enterprise. Not in CISA KEV. EPSS 0.2% (higher than 8.8% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 6.5 of 100.T1068https://patchfirst.co/cve/CVE-2020-5362/CVE-2020-5362Wed, 10 Jun 2020 00:00:00 GMTDell · Dell Client Consumer and Commercial platforms. Not in CISA KEV. EPSS 0.3% (higher than 21.6% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1098 Account Manipulation. Priority 9.3 of 100.T1068T1098https://patchfirst.co/cve/CVE-2020-5365/CVE-2020-5365Wed, 20 May 2020 00:00:00 GMTDell · Isilon OneFS. Not in CISA KEV. EPSS 1.0% (higher than 62.3% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1110 Brute Force; T1078.001 Default Accounts. Priority 16.2 of 100.T1110T1078.001https://patchfirst.co/cve/CVE-2020-5364/CVE-2020-5364Wed, 20 May 2020 00:00:00 GMTDell · Isilon OneFS. Not in CISA KEV. EPSS 1.0% (higher than 62.3% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1078.001 Default Accounts; T1005 Data from Local System. Priority 16.2 of 100.T1078.001T1005https://patchfirst.co/cve/CVE-2020-5332/CVE-2020-5332Mon, 04 May 2020 00:00:00 GMTDell · RSA Archer. Not in CISA KEV. EPSS 2.2% (higher than 82.9% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1059 Command and Scripting Interpreter. Priority 21.6 of 100.T1059https://patchfirst.co/cve/CVE-2020-5331/CVE-2020-5331Mon, 04 May 2020 00:00:00 GMTDell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1005 Data from Local System. Priority 16.9 of 100.T1005https://patchfirst.co/cve/CVE-2020-5336/CVE-2020-5336Mon, 04 May 2020 00:00:00 GMTDell · RSA Archer. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 4.6 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 13.9 of 100.T1204.001T1059.007T1557https://patchfirst.co/cve/CVE-2020-5350/CVE-2020-5350Wed, 15 Apr 2020 00:00:00 GMTDell · Integrated Data Protection Appliance. Not in CISA KEV. EPSS 2.0% (higher than 80.5% of CVEs). CVSS 7.9 HIGH. ATT&CK: T1059 Command and Scripting Interpreter; T1098 Account Manipulation. Priority 21.6 of 100.T1059T1098https://patchfirst.co/cve/CVE-2020-5340/CVE-2020-5340Wed, 25 Mar 2020 00:00:00 GMTDell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-5339/CVE-2020-5339Wed, 25 Mar 2020 00:00:00 GMTDell · RSA Authentication Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 13.7 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2019-18582/CVE-2019-18582Wed, 18 Mar 2020 00:00:00 GMTDell · Data Protection Advisor. Not in CISA KEV. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1059 Command and Scripting Interpreter. Priority 24.7 of 100.T1059https://patchfirst.co/cve/CVE-2019-18581/CVE-2019-18581Wed, 18 Mar 2020 00:00:00 GMTDell · Data Protection Advisor. Not in CISA KEV. EPSS 3.9% (higher than 90.3% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1059 Command and Scripting Interpreter. Priority 24.4 of 100.T1059https://patchfirst.co/cve/CVE-2019-3762/CVE-2019-3762Wed, 18 Mar 2020 00:00:00 GMTDell · Data Protection Central. Not in CISA KEV. EPSS 0.6% (higher than 51% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1588.004 Digital Certificates; T1553 Subvert Trust Controls. Priority 15.5 of 100.T1588.004T1553https://patchfirst.co/cve/CVE-2019-18578/CVE-2019-18578Fri, 13 Mar 2020 00:00:00 GMTDell · XtremIO. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.0 CRITICAL. ATT&CK: T1189 Drive-by Compromise; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 19.6 of 100.T1189T1059.007T1185https://patchfirst.co/cve/CVE-2020-5328/CVE-2020-5328Fri, 06 Mar 2020 00:00:00 GMTDell · Isilon OneFS. Not in CISA KEV. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 21.3 of 100.T1068https://patchfirst.co/cve/CVE-2020-5326/CVE-2020-5326Fri, 21 Feb 2020 00:00:00 GMTDell · Dell Client Consumer and Commercial Platforms. Not in CISA KEV. EPSS 0.3% (higher than 28.6% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1542.001 System Firmware. Priority 10.0 of 100.T1068T1542.001https://patchfirst.co/cve/CVE-2019-18573/CVE-2019-18573Wed, 18 Dec 2019 00:00:00 GMTDell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 1.0% (higher than 62.4% of CVEs). CVSS 8.7 HIGH. ATT&CK: T1563 Remote Service Session Hijacking. Priority 18.6 of 100.T1563https://patchfirst.co/cve/CVE-2019-18571/CVE-2019-18571Wed, 18 Dec 2019 00:00:00 GMTDell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 0.5% (higher than 43% of CVEs). CVSS 5.4 MEDIUM. ATT&CK: T1204.002 Malicious File; T1059.007 JavaScript; T1185 Browser Session Hijacking. Priority 12.4 of 100.T1204.002T1059.007T1185https://patchfirst.co/cve/CVE-2019-3750/CVE-2019-3750Tue, 03 Dec 2019 00:00:00 GMTDell · Dell Command Update (DCU). Not in CISA KEV. EPSS 0.3% (higher than 24.9% of CVEs). CVSS 5.6 MEDIUM. ATT&CK: T1485 Data Destruction. Priority 8.9 of 100.T1485https://patchfirst.co/cve/CVE-2019-3767/CVE-2019-3767Mon, 14 Oct 2019 00:00:00 GMTDell · ImageAssist. Not in CISA KEV. EPSS 0.2% (higher than 8.8% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1005 Data from Local System. Priority 7.0 of 100.T1005