[ CVE-2026-80358 · Published 28 Sep 2026 ]

Vulnerability in Dell Boot Optimized Server Storage (BOSS)

CVSS 5.1 EPSS <1%No fix listed yet

[ Description ]Official description

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.