DELL LIVE OPTICS COLLECTOR · CVE-2026-86364 · Other
NO FIX YET · SEE WHAT TO DO
Dell Live Optics Collector versions before 27.3.8.317 generate values with insufficient randomness. A low-privileged user with local access could exploit this to expose information.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that run Dell Live Optics Collector on a machine where other low-privileged local users have access. Sources do not describe any remote trigger. unknown for further detail.
Not affected if no-local-untrusted-users
Who cares dell, live-optics, windows
27.3.8.31727.3.8.317 or laterDell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
This page as .md · .json · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.