What is the CVSS score of EUVD-2026-53929?

EUVD-2026-53929 has a contested CVSS base score of 9.1 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Dell RVTools are affected by EUVD-2026-53929?

Dell RVTools collector, widely used for VMware vSphere inventory management, contains a critical certificate validation flaw allowing remote, unauthenticated attackers to intercept and modify…. A patch is available.

How to fix or mitigate EUVD-2026-53929?

Within 24 hours, identify all systems running Dell RVTools collector versions prior to 4.8.1 and document their network exposure. Within 7 days, deploy the vendor-released patch version 4.8.1 across all affected instances, staging the upgrade in a non-production environment first to validate stability. Within 30 days, confirm organization-wide patching completion, verify secure certificate validation through security monitoring, and formally document remediation for audit compliance.

Dell RVTools EUVD-2026-53929

| CVE-2026-64993 CRITICAL

Improper Certificate Validation (CWE-295)

2026-08-06 dell

GHSA-f3q3-4gxr-rf8v

Information Disclosure Dell Rvtools

Critical

Disputed · 9.1 NVD

Severity by source

Sources disagree (Medium–Critical)

Vendor (dell) PRIMARY

MEDIUM

qualitative

NVD

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

vuln.today AI

6.8 MEDIUM

MitM interception raises AC:H and the collector must be run (UI:R); no auth needed (PR:N) and high confidentiality/integrity but no availability impact.

3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

4.0 AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Updated

Aug 10, 2026 - 20:58 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 10, 2026 - 20:52 vuln.today

cvss_changed

Severity Changed

Aug 10, 2026 - 20:52 NVD

MEDIUM CRITICAL

CVSS changed

Aug 10, 2026 - 20:52 NVD

6.8 (MEDIUM) 9.1 (CRITICAL)

Patch available

Aug 06, 2026 - 15:17 EUVD

Analysis Generated

Aug 06, 2026 - 14:21 vuln.today

DescriptionNVD

Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity.

AnalysisAI

Information disclosure and tampering in Dell RVTools collector versions prior to 4.8.1 stems from improper certificate validation (CWE-295), letting a remote unauthenticated attacker in a machine-in-the-middle position intercept or alter data exchanged between the collector and its target. Rated CVSS 9.1 (C:H/I:H) but with A:N, the flaw affects the popular VMware vSphere inventory-reporting utility. No public exploit is identified at time of analysis; EPSS is low at 0.14% and SSVC lists exploitation as none.

Technical ContextAI

RVTools is a Windows-based utility that connects to VMware vCenter/ESXi over the vSphere API (HTTPS/TLS) to export inventory and configuration data about virtual infrastructure. The 'collector' component is the part that establishes the outbound TLS session to gather this data. CWE-295 (Improper Certificate Validation) means the collector fails to properly verify the server's TLS certificate chain, hostname, or trust anchor before trusting the connection - the classic precondition for a TLS man-in-the-middle attack. The single affected CPE is cpe:2.3:a:dell:rvtools:*, with all versions below 4.8.1 impacted.

RemediationAI

Vendor-released patch: upgrade Dell RVTools to version 4.8.1 or later, which corrects the certificate validation logic in the collector, per Dell Security Advisory DSA-2026-325 (https://www.dell.com/support/kbdoc/en-in/000494748/dsa-2026-325-security-update-for-dell-rvtools-vulnerability). Because RVTools is a client-side collector rather than a network service, the most effective compensating control until patched is to run the collector only from a trusted management workstation over a trusted network segment and to avoid running it across untrusted or shared network paths where an attacker could intercept the TLS session to vCenter/ESXi; restricting the collector host's egress so it only reaches known vCenter/ESXi endpoints (and monitoring for unexpected TLS interception or certificate anomalies) reduces the MitM window, at the cost of tighter network management overhead. There is no server-side toggle to disable, so patching to 4.8.1 is strongly preferred over relying on network hygiene alone.