CVE-2026-82155

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability

Risk score: 47/100
CVSS: 7.8 v3.1
Published: 3 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Affected: See advisory
Fix: Upgrade the product to 2.4.4 or later.
Exploitation: No known exploitation

Why it is Yellow

CVSS 7.8 high

References

https://www.dell.com/support/kbdoc/en-us/000515018/dsa-2026-445-security-update-for-dell-os-recovery-tool-for-multiple-vulnerabilities

Original description

Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.

Last activity 3 Nov 2026. Patch Forecast updates every hour.