rootpwn

low · CVSS v3 2.2

CVE-2026-82153

Dell OS Recovery Tool versions prior to 2.4.4 store sensitive data insecurely. A low‑privileged attacker with physical access could read thi

Overview

Dell OS Recovery Tool versions prior to 2.4.4 store sensitive data insecurely. A low‑privileged attacker with physical access could read this data, leading to information disclosure. The vulnerability is low severity but still relevant for physical security controls.

Description

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Impact

Confidentiality is at risk as sensitive information may be exposed. The primary impact is on system administrators and users who rely on the recovery tool. Defenders should treat this as a potential data leakage scenario.

Remediation

Upgrade to Dell OS Recovery Tool 2.4.4 or later. If upgrade is not immediately possible, restrict physical access to devices running the tool and enforce encryption of stored credentials. Monitor for unauthorized access attempts.

Risk context

Severity is low with CVSS v3 score of 2.2. No EPSS data available. The risk is moderate for environments with inadequate physical security.

Affected products

  • Dell OS Recovery Tool 2.4.3
  • Dell OS Recovery Tool 2.4.2
  • Dell OS Recovery Tool 2.4.1
  • Dell OS Recovery Tool 2.4.0

Scores

Severity
low
CVSS v2
1.7
CVSS v3
2.2
CVSS v4
—
EPSS
—

Dell OSRecoveryTool InformationDisclosure PhysicalAccess LowSeverity Patch SecureStorage

← All CVEs

Related CVEs

low

CVE-2026-111448

Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct sibling directory, allowing access outside the intended root, including limited file disclosure. Separately, the CLI database-dump output check can write outside the application root to an existing writable case-distinct sibling directory; that action requires the CLI POST, loopback and password gate. This is fixed in 4.2.0.

View analysis

low

CVE-2026-109401

The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.17.0 via the 'email_address' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to extract complete logged mail rows belonging to other users — including recipient addresses, message subjects, full message bodies, and any URLs contained therein — whose addresses happen to match the wildcard. Exploitation requires an administrator to process a personal-data export request for the attacker's email address via the standard WordPress privacy workflow, and the attacker's address must contain a LIKE wildcard character (such as an underscore) that matches at least one other user's address in the mail log.

View analysis

low

CVE-2026-53575

EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an authenticated administrator can place crafted content in the applicationName setting through CSP nonce injection. The persistent injection is inserted into the main application page without escaping, allowing attacker-controlled JavaScript to run in users' sessions and leak page data, including unsaved user input. This issue is fixed in version 9.3.9.

View analysis