[ CVE-2026-82154 · Published 3 Nov 2026 ]
Vulnerability in Dell OS Recovery tool
CVSS 2.4
EPSS <1%No fix listed yet
[ Description ]Official description
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.