{"id":"CVE-2026-86375","title":"Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability","summary":"Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized ac…","severity":"medium","cvss":6.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-311"],"vendor":"Dell","product":"Application Installer,","affected":["application_installer < 26.09.0.1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-19T18:19:52.543277Z"},"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T18:19:59.198Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-86375","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000510641/dsa-2026-423-security-update-for-dell-application-installer-for-a-missing-encryption-of-sensitive-data-vulnerability"}],"tags":["cve.org"],"ingestedAt":"2026-10-19T15:31:18.961Z","slug":"CVE-2026-86375","body":"## Overview\n\nDell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.\n\n## Affected\n\n- `application_installer < 26.09.0.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":34.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}