CVE-2026-86363 · Vendor
NO FIX YET · SEE WHAT TO DO
Dell Live Optics Collector versions before 27.3.13.330 generate a predictable IV for CBC-mode encryption. A low-privileged local user could exploit this to expose information.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only installations of Dell Live Optics Collector earlier than 27.3.13.330 are exposed, and the attacker needs local access with low privileges. Systems where the collector is not installed can skip this.
Not affected if fixed-version, not-installed
Who cares dell, live-optics, windows
27.3.13.33027.3.13.330 or laterDell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.