Use of Hard-coded Password Vulnerability in Dell Live Optics Collector
CVE-2026-70413

5.6MEDIUM

Key Information:

Vendor

Dell
Status
Live Optics Collector
Vendor
CVE Published:
28 September 2026

What is CVE-2026-70413?

The Dell Live Optics Collector, prior to version 27.2.13.310, is susceptible to a vulnerability involving hard-coded passwords. This allows an attacker with low privileges and local access to exploit the vulnerability, potentially resulting in exposure of sensitive information. This security flaw underscores the importance of secure password practices and the need for regular software updates to mitigate risks.

Affected Version(s)

Live Optics Collector 0 < 27.2.13.310 or later

References

https://www.dell.com/support/kbdoc/en-us/000514560/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.