{"id":"CVE-2026-86359","published":"2026-09-16T17:18:16.437","lastModified":"2026-09-17T12:18:28.597","description":"Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-276"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000509459/dsa-2026-419-security-update-for-dell-repository-manager-drm-vulnerability","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows a low-privileged attacker to exploit incorrect default permissions, potentially leading to elevation of privileges.","exploitability":"Exploitation requires remote access and a low-privileged attacker. The vulnerability is relatively easy to exploit given the preconditions.","blast_radius":"If exploited, the impact could be significant, as it allows for potential elevation of privileges within the affected system.","remediation":"Upgrade to version 3.5.2 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["priv-escalation","remote","permissions"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-02T08:49:38.901Z"}}