CVE-2026-82153

Published: Oct 14, 2026Modified: Oct 15, 2026

2.2

Vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Exploitability: 0.5 / Impact: 1.4

Source: security_alert@emc.com (Secondary)

Description

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Related CWEs

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (1)

https://www.dell.com/support/kbdoc/en-us/000517461/dsa-2026-450-security-update-for-dell-os-recovery-tool-for-an-insecure-storage-of-sensitive-information-vulnerability

Source: security_alert@emc.com

Timeline

No history available yet.