Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potentially exploit this vulnerability to gain elevated privileges.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDell Common Event Enabler
APPDell≤ 8.9.8.2
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2025-29986HIGH8.3same product
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel...
CVE-2024-28964HIGH7.8same product
Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CA...
CVE-2025-29985MEDIUM6.5same product
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure...
CVE-2026-22769CRITICAL10.0⚠ KEVPL ✓same vendor
Dell RecoverPoint for VMs — zahardkodowane dane uwierzytelniające (RCE, root)
CVE-2026-54489CRITICAL9.1PL ✓same vendor
Dell Virtual Storage Integrator — ujawnienie sesji i przejęcie konta