{"id":"CVE-2026-86363","kind":"vulnerability","aliases":["CVE-2026-86363"],"related":[],"title":"Dell Live Optics Collector: predictable encryption IV leaks information locally","description":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","summary":"Dell Live Optics Collector versions before 27.3.13.330 generate a predictable IV for CBC-mode encryption. A low-privileged local user could exploit this to expose information.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","live-optics","vendor","windows"],"not_affected_if":["fixed-version","not-installed"],"how_to_check":"- Check the installed Live Optics Collector version against `27.3.13.330`","fix":"- Dell Live Optics Collector: move to `27.3.13.330` or later","status":"open","published_at":"2026-11-11T18:19:50+00:00","first_seen_at":"2026-11-11T18:28:44+00:00","triaged_at":"2026-11-11T18:29:36+00:00","updated_at":"2026-11-11T18:29:36+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-11T18:29:36Z","model":"claude-haiku-5-5","output":{"fix":"- Dell Live Optics Collector: move to `27.3.13.330` or later","reach":"local","title":"Dell Live Optics Collector: predictable encryption IV leaks information locally","impact":"low","summary":"Dell Live Optics Collector versions before 27.3.13.330 generate a predictable IV for CBC-mode encryption. A low-privileged local user could exploit this to expose information.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["dell","live-optics","windows"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local low-privilege user reads protected information","analyst_note":"","how_to_check":"- Check the installed Live Optics Collector version against `27.3.13.330`\n- unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["not-installed","fixed-version"],"who_is_affected":"Only installations of Dell Live Optics Collector earlier than 27.3.13.330 are exposed, and the attacker needs local access with low privileges. Systems where the collector is not installed can skip this.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000668,"input_tokens":4549,"output_tokens":427,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-86363':13A,16A '27.3.13.330':29B,58C 'access':75C 'attack':72C 'cbc':36B,66C 'cbc-mode':35B 'collector':4A,26B,54C 'contain':59C 'could':45B,76C 'cve':11A,14A 'dell':1A,17B,23B,51C 'encrypt':6A,38B 'exploit':46B,78C 'expos':49B 'exposur':84C 'generat':30B,61C 'inform':9A,50B,83C 'iv':7A,33B,64C 'lead':81C 'leak':8A 'live':2A,19B,24B,52C 'live-opt':18B 'local':10A,43B,74C 'low':41B,70C 'low-privileg':40B 'mode':37B,67C 'optic':3A,20B,25B,53C 'potenti':77C 'predict':5A,32B,63C 'prior':56C 'privileg':42B,71C 'user':44B 'vendor':21B 'version':27B,55C 'vulner':68C,80C 'window':22B","nicknames":[],"mitigations":[],"who_affected":"Only installations of Dell Live Optics Collector earlier than 27.3.13.330 are exposed, and the attacker needs local access with low privileges. Systems where the collector is not installed can skip this.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dell","liveoptics","medium","vendor","windows"],"campaign_type":null,"search_a":"'-2026':12A,15A '-86363':13A,16A 'collector':4A 'cve':11A,14A 'dell':1A 'encrypt':6A 'inform':9A 'iv':7A 'leak':8A 'live':2A 'local':10A 'optic':3A 'predict':5A","search_b":"'27.3.13.330':29B 'cbc':36B 'cbc-mode':35B 'collector':26B 'could':45B 'dell':17B,23B 'encrypt':38B 'exploit':46B 'expos':49B 'generat':30B 'inform':50B 'iv':33B 'live':19B,24B 'live-opt':18B 'local':43B 'low':41B 'low-privileg':40B 'mode':37B 'optic':20B,25B 'predict':32B 'privileg':42B 'user':44B 'vendor':21B 'version':27B 'window':22B","search_c":"'27.3.13.330':58C 'access':75C 'attack':72C 'cbc':66C 'collector':54C 'contain':59C 'could':76C 'dell':51C 'exploit':78C 'exposur':84C 'generat':61C 'inform':83C 'iv':64C 'lead':81C 'live':52C 'local':74C 'low':70C 'mode':67C 'optic':53C 'potenti':77C 'predict':63C 'prior':56C 'privileg':71C 'version':55C 'vulner':68C,80C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T18:19:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86363","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86363","severity":null,"published_at":"2026-11-11T18:19:50+00:00","modified_at":"2026-11-11T18:19:50+00:00","first_seen_at":"2026-11-11T18:28:44+00:00","fetched_at":"2026-11-11T18:28:44+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}