CVE-2026-82154
LowCVSS 2.4Summary
Dell OS Recovery tool versions prior to 2.4.4 contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
Risk Assessment
An individual with physical access to the device may gain access to sensitive information, potentially compromising data security. Organizations using Dell OS Recovery Tool are exposed to data leakage if physical access to hardware occurs.
Recommendation
Update Dell OS Recovery Tool to version 2.4.4 or later. Restrict physical access to devices with the tool installed.
Other vulnerabilities in Dell OS Recovery Tool
See all- CVE-2026-82155High
Dell OS Recovery Tool versions prior to 2.4.4 contain an untrusted search path vulnerability. An unauthenticated attacker with local access could potentially exploit it to execute commands.
- CVE-2026-82153Low
Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
Original NVD description (English source)
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS