CVE-2026-82153
Awaiting Analysis Awaiting Analysis - Queue

Dell OS Recovery Tool Insecure Storage of Sensitive Information

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Dell

Description
Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-82153
EUVD
EUVD-2026-101607

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Dell OS Recovery Tool 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-922 The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell OS Recovery Tool versions before 2.4.4 store sensitive information insecurely. This allows a low-privileged attacker with physical access to potentially read that information, leading to unauthorized disclosure.

Detection Guidance

Detection of this vulnerability requires checking the installed version of Dell OS Recovery Tool. If the version is prior to 2.4.4, the system is vulnerable. No specific commands are provided in the context for detection.

Impact Analysis

If you use an affected version of Dell OS Recovery Tool, an attacker with physical access to your device could recover stored sensitive data such as credentials or configuration details.

Compliance Impact

This vulnerability involves insecure storage of sensitive information in Dell OS Recovery Tool versions prior to 2.4.4. Physical access by a low-privileged attacker could lead to information disclosure, which may violate data protection requirements under GDPR or HIPAA if sensitive personal or health data is exposed.

Mitigation Strategies

Update Dell OS Recovery Tool to version 2.4.4 or later to address the insecure storage issue. Restrict physical access to systems running the tool to prevent unauthorized exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82153. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart