Quick answers
- Is CVE-2026-86363 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-86363 being exploited in the wild.
- How severe is CVE-2026-86363?
- Medium severity, with a CVSS score of 5.5, published 11 November 2026.
- Which products and versions are affected?
- Dell Live Optics Collector prior to 27.3.13.330.
- Is there a fix for CVE-2026-86363?
- Yes: fixed in Version 27.3.13.330 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-86363 attacked?
- It is attacked with local access.
- Am I affected by CVE-2026-86363?
- Check whether you run Dell Live Optics Collector at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
How to fix
- Fixed in: Version 27.3.13.330 or later
Technical details
A generation of predictable IV with CBC mode vulnerability exists in the encryption implementation of Dell Live Optics Collector prior to version 27.3.13.330. A low-privileged attacker with local access can exploit this weakness to recover encrypted data. The vulnerability affects the confidentiality of stored information without requiring special conditions beyond local access and existing low privileges.
Affected products
- Dell Live Optics Collector prior to 27.3.13.330
Timeline
- 2026-11-03: advisory
- 2026-11-11: disclosed