{"id":"CVE-2026-86364","aliases":["EUVD-2026-123613","GHSA-5h27-fqgw-v6vf"],"status":"published","title":"Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random...","description":"Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-330"],"published":"2026-11-11T17:26:08Z","modified":"2026-11-11T18:31:48Z","products":[{"vendor":"dell","product":"live optics collector"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000529141/dsa-2026-484-security-update-for-dell-live-optics-collector-vulnerabilities","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86364"},{"url":"https://github.com/advisories/GHSA-5h27-fqgw-v6vf"}],"sources":{"cve":[{"id":"CVE-2026-86364","description":"Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","status":"published","published":"2026-11-11T17:26:08.448Z","modified":"2026-11-11T17:26:08.448Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-330"],"updated_at":"2026-11-11T18:31:13.173962Z"}],"euvd":[{"id":"EUVD-2026-123613","description":"Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","status":"published","published":"2026-11-11T17:26:08Z","modified":"2026-11-11T17:26:08Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-11T20:30:18.561883Z"}],"ghsa":[{"id":"GHSA-5h27-fqgw-v6vf","title":"Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random...","description":"Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","status":"published","published":"2026-11-11T18:31:40Z","modified":"2026-11-11T18:31:48Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-330"],"updated_at":"2026-11-11T18:35:38.720583Z"}],"nvd":[{"id":"CVE-2026-86364","description":"Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.","status":"published","published":"2026-11-11T18:19:50.98Z","modified":"2026-11-11T18:19:50.98Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-330"],"updated_at":"2026-11-11T19:25:58.374679Z"}]}}