EUVD-2026-53929
GHSA-f3q3-4gxr-rf8v
Severity by source
Sources disagree (Medium–Critical)AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
MitM interception raises AC:H and the collector must be run (UI:R); no auth needed (PR:N) and high confidentiality/integrity but no availability impact.
vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionNVD
Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity.
AnalysisAI
Information disclosure and tampering in Dell RVTools collector versions prior to 4.8.1 stems from improper certificate validation (CWE-295), letting a remote unauthenticated attacker in a machine-in-the-middle position intercept or alter data exchanged between the collector and its target. Rated CVSS 9.1 (C:H/I:H) but with A:N, the flaw affects the popular VMware vSphere inventory-reporting utility. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to occupy a man-in-the-middle position on the network path between the RVTools collector and the VMware vCenter/ESXi endpoint it connects to, because the vulnerability is improper certificate validation (CWE-295) in the collector's outbound TLS session - there is no listening service to attack directly. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals conflict and must be weighed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade Dell RVTools to version 4.8.1 or later, which corrects the certificate validation logic in the collector, per Dell Security Advisory DSA-2026-325 (https://www.dell.com/support/kbdoc/en-in/000494748/dsa-2026-325-security-update-for-dell-rvtools-vulnerability). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running Dell RVTools collector versions prior to 4.8.1 and document their network exposure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
RVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the password encryption utility (RV
RVToolsPasswordEncryption.exe in RVTools 4.0.6 allows users to encrypt passwords to be used in the configuration files.
Same weakness CWE-295 – Improper Certificate Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today