---
id: CVE-2026-86375
title: >-
  Dell Application Installer, versions prior to 26.09.0.1, contain a Missing
  Encryption of Sensitive Data vulnerability
summary: >-
  Dell Application Installer, versions prior to 26.09.0.1, contain a Missing
  Encryption of Sensitive Data vulnerability. An unauthenticated attacker with
  local access could potentially exploit this vulnerability, leading to
  Unauthorized ac…
severity: medium
cvss: 6.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-311
vendor: Dell
product: 'Application Installer,'
affected:
  - application_installer < 26.09.0.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-19T18:19:52.543277Z'
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T18:19:59.198Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-86375'
references:
  - url: >-
      https://www.dell.com/support/kbdoc/en-us/000510641/dsa-2026-423-security-update-for-dell-application-installer-for-a-missing-encryption-of-sensitive-data-vulnerability
tags:
  - cve.org
ingestedAt: '2026-10-19T15:31:18.961Z'
---

## Overview

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

## Affected

- `application_installer < 26.09.0.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.