{"id":"CVE-2026-86363","aliases":["EUVD-2026-123616","GHSA-vfqx-wjpq-xv34"],"status":"published","title":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV...","description":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-329"],"published":"2026-11-11T17:30:04Z","modified":"2026-11-11T18:31:47Z","products":[{"vendor":"dell","product":"live optics collector"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000529138/dsa-2026-485-security-update-for-dell-live-optics-collector-vulnerabilities","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86363"},{"url":"https://github.com/advisories/GHSA-vfqx-wjpq-xv34"}],"sources":{"cve":[{"id":"CVE-2026-86363","description":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","status":"published","published":"2026-11-11T17:30:04.847Z","modified":"2026-11-11T17:30:04.847Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-329"],"updated_at":"2026-11-11T18:31:13.173962Z"}],"euvd":[{"id":"EUVD-2026-123616","description":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","status":"published","published":"2026-11-11T17:30:04Z","modified":"2026-11-11T17:30:04Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-11T20:30:18.561883Z"}],"ghsa":[{"id":"GHSA-vfqx-wjpq-xv34","title":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV...","description":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","status":"published","published":"2026-11-11T18:31:40Z","modified":"2026-11-11T18:31:47Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-329"],"updated_at":"2026-11-11T18:35:38.720583Z"}],"nvd":[{"id":"CVE-2026-86363","description":"Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","status":"published","published":"2026-11-11T18:19:50.837Z","modified":"2026-11-11T18:19:50.837Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-329"],"updated_at":"2026-11-11T19:25:58.374679Z"}]}}