CVE-2025-43993High· 7.8▾ TwilightDell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code Execution.
pro_rugged_13_ra13250_firmware < 3.2.0.22pro_rugged_14_rb14250_firmware < 3.2.0.22latitude_5350_firmware < 3.2.0.22latitutde_5450_firmware < 3.2.0.22latitude_5550_firmware < 3.2.0.22latitude_7030_rugged_extreme_tablet_firmware < 3.2.0.22latitude_7350_firmware < 3.2.0.22latitude_7350_detachable_firmware < 3.2.0.22latitude_7450_firmware < 3.2.0.22latitude_7650_firmware < 3.2.0.22latitude_9450_2-in-1_firmware < 3.2.0.22mobile_precision_3591_firmware < 3.2.0.22precision_3490_firmware < 3.2.0.22precision_3590_firmware < 3.2.0.22Upgrade past the affected range:
pro_rugged_13_ra13250_firmware 3.2.0.22pro_rugged_14_rb14250_firmware 3.2.0.22latitude_5350_firmware 3.2.0.22latitutde_5450_firmware 3.2.0.22latitude_5550_firmware 3.2.0.22latitude_7030_rugged_extreme_tablet_firmware 3.2.0.22latitude_7350_firmware 3.2.0.22latitude_7350_detachable_firmware 3.2.0.22latitude_7450_firmware 3.2.0.22latitude_7650_firmware 3.2.0.22latitude_9450_2-in-1_firmware 3.2.0.22mobile_precision_3591_firmware 3.2.0.22precision_3490_firmware 3.2.0.22precision_3590_firmware 3.2.0.22Connected by shared product, vendor, weakness, or advisory.
CVE-2026-81469High· 7.8Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability
CVE-2026-86360Critical· 9.6Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability
CVE-2026-63697High· 7.6Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability
CVE-2026-86361High· 8.2Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability
CVE-2026-86362High· 8.2Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability
CVE-2026-71168High· 7.3Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability