CVE-2022-26865

6.8 mediumEPSS 0.3%

Medium (6.8) in dell supportassist os recovery. EPSS 0.3% chance of exploitation in the next 30 days.

Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-288
Published: 2022-05-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:supportassist_os_recovery

References

https://www.dell.com/support/kbdoc/en-us/000198780/dsa-2022-102
https://www.dell.com/support/kbdoc/en-us/000198780/dsa-2022-102

Check your stack JSON