CVE-2026-86363: Medium severity vulnerability
Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Live Optics Collectorto a version that resolves this vulnerability.Fixed in 27.3.13.330
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems running Dell Live Optics Collector versions earlier than 27.3.13.330 are affected. Exploitation requires local access and a low-privileged attacker account.
What could an attacker achieve?
A successful exploit could expose information. The provided data does not indicate any integrity impact or availability impact.
What should be prioritized for remediation?
Update Dell Live Optics Collector to version 27.3.13.330 or later. Until updating is possible, limit local access to systems running the collector, especially for low-privileged users.