{"affected":[{"defaultStatus":"unaffected","product":"OS Recovery tool","source":"CNA: dell","vendor":"Dell","versions":[{"lessThan":"2.4.4","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-82155","cwes":["CWE-428"],"description":"Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.","epss":{"date":"2026-11-04","percentile":0.31933,"score":0.00378},"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: dell","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},{"score":7.8,"severity":"high","source":"NVD: security_alert@emc.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793855918370,"publishedAt":1793737947344,"references":[{"source":"CNA: dell","tags":["vendor-advisory"],"url":"https://www.dell.com/support/kbdoc/en-us/000515018/dsa-2026-445-security-update-for-dell-os-recovery-tool-for-multiple-vulnerabilities"},{"source":"security_alert@emc.com","tags":[],"url":"https://www.dell.com/support/kbdoc/en-us/000515018/dsa-2026-445-security-update-for-dell-os-recovery-tool-for-multiple-vulnerabilities"}],"remediation":[],"revision":"1234e5848d34b78acb18f0c24db92cfe7179e5f800b72f68b0ff089c603b3cf0","sources":[{"modifiedAt":1793854553456,"name":"CNA: dell","retrievedAt":1793855405017,"url":"https://www.cve.org/CVERecord?id=CVE-2026-82155"},{"modifiedAt":1793855918370,"name":"NVD","retrievedAt":1793859385728,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82155"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793855417466,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-82155"}],"ssvc":{"assessedAt":1793750400000,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2026-82155","updatedAt":1793859385728}