CVE-2026-82154: Low severity vulnerability

Published Nov 3, 2026

Updated

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Event History

Nov 3, 2026

CVE Published

via MITRE·08:30 PM

Data Sourced

via MITRE·08:30 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems running Dell OS Recovery tool versions earlier than 2.4.4 are exposed if an unauthenticated attacker can obtain physical access to the device.

What access does an attacker need to exploit the vulnerability?

The attacker does not need authentication or user interaction, but does need physical access. Successful exploitation could disclose information; no integrity or availability impact is stated.

What version should be used to remediate the issue?

Update the Dell OS Recovery tool to version 2.4.4 or later. The affected versions are those prior to 2.4.4.

CVE-2026-82154: Low severity vulnerability

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What access does an attacker need to exploit the vulnerability?

What version should be used to remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What access does an attacker need to exploit the vulnerability?

What version should be used to remediate the issue?