Dell Application Installer CVE-2026-86375

Requires local access to a host running Dell Application Installer at a version prior to 26.09.0.1; the application must store or process the sensitive data in unencrypted form, which a local actor can then read without authentication (PR:N). The key limiting factor is the local attack vector (AV:L) - there is no remote or network path, so an attacker must already have interactive or filesystem-level access to the affected machine, making shared, multi-user, or physically accessible Dell systems the realistic exposure surface.

This is a moderate-severity local information-disclosure issue (CVSS 6.2) rather than a high-urgency remote threat. The CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N shows the defining constraint is AV:L - exploitation requires local access to the host, which sharply limits the attacker population compared to a network-reachable flaw. PR:N (unauthenticated) and AC:L (low complexity) mean that once an actor is local, no credentials or special timing are needed, and the impact is confined to confidentiality (C:H) with no integrity or availability effect, consistent with CWE-311 Missing Encryption of Sensitive Data. No EPSS score, KEV listing, or POC was provided in the intelligence, so there is no public exploit identified at time of analysis and no evidence of active exploitation; the SSVC exploitation state should be treated as 'none' pending further data. One signal conflict to verify: the input Tags include 'Authentication Bypass,' but the CWE (311) and description describe exposure of unencrypted sensitive data leading to unauthorized access, which is information disclosure, not an authentication bypass - the 'Authentication Bypass' label appears inaccurate. Overall this is a real but lower-priority fix: patch in normal cycles, prioritizing multi-user or shared hosts where local access by untrusted users is plausible.

An attacker or malicious user who already has local access to a system running a vulnerable Dell Application Installer (prior to 26.09.0.1) locates sensitive data that the application stores or handles without encryption. Because the data is unencrypted and no authentication is required to read it, the local actor recovers confidential information they should not be able to access. No public exploit code was provided, and the local attack vector means the actor must first obtain access to the machine.