๐Ÿ” CVE Alert

CVE-2026-80358

MEDIUM 5.1
CVSS Score
5.1
EPSS Score
0.0%
EPSS Percentile
0th

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.

CWE CWE-1191
Vendor dell
Product boot optimized server storage (boss)
Published Sep 28, 2026
Stay Ahead of the Next One

Get instant alerts for dell boot optimized server storage (boss)

Be the first to know when new medium vulnerabilities affecting dell boot optimized server storage (boss) are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L
Attack Vector
Physical
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
Low

Affected Versions

Dell / Boot Optimized Server Storage (BOSS)
0 < 2.2.13.2038

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
dell.com: https://www.dell.com/support/kbdoc/en-us/000513073/dsa-2026-402-security-update-for-dell-boot-optimized-server-storage-boss-vulnerability