CVE-2026-82155
High · 7.8CVSS
7.8
EPSS
0.4%
Published
Nov 3, 2026
CISA due date
—
The record
Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-97860 YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with… CWE-428
- CVE-2026-66839 NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted… CWE-428
- CVE-2026-18755 A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with… CWE-428
- CVE-2026-9128 A code execution security issue exists within Studio 5000 Logix Designer® due to an… CWE-428
- CVE-2026-8864 The HP Fan Control App might allow local escalation of privileges. CWE-428
- CVE-2020-37253 Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme… CWE-428
- CVE-2020-37252 Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in… CWE-428
- CVE-2020-37254 Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an… CWE-428