The flaw sits in Dell System Update, the utility that pushes firmware and driver patches to Dell machines. A crafted path lets an unauthenticated remote attacker write where it shouldn't and execute code with root privileges — a clean jump from 'can reach the host' to 'owns the host.' Versions before 2.3.0.0 are affected. Dell has a fixed build out, so the action is simple: get to 2.3.0.0 or later anywhere DSU runs. No public exploitation yet, but a 9.6 in a widely deployed update tool is not one to sit on.