CVE-2026-82154

CVSS 2.4 (low) · published 2026-11-03

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Weakness: CWE-321

Source: NVD CVE-2026-82154

References

• https://www.dell.com/support/kbdoc/en-us/000516289/dsa-2026-230-security-update-for-dell-client-platform-bios-for-multiple-ami-bios-vulnerabilities

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.