CVE-2026-32652

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged attacker with console access could potentially exploit this vulnerability to gain Filesystem access. This vulnerability only affects fresh installations of Collector versions earlier than 1.18.3. Systems that have been upgraded (either manually or automatically) to version 1.18.3 or later are not impacted, even if they were originally installed on an earlier version.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-in/000477931/dsa-2026-231-security-update-for-dell-aiops-collector-for-default-credential-vulnerability	Vendor Advisory Mitigation

Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:aiops_collector:*:*:*:*:*:*:*:*

History

23 Jun 2026, 13:44

Type	Values Removed	Values Added
First Time		Dell Dell aiops Collector
CPE		cpe:2.3:a:dell:aiops_collector::::::::
References	~~() https://www.dell.com/support/kbdoc/en-in/000477931/dsa-2026-231-security-update-for-dell-aiops-collector-for-default-credential-vulnerability -~~	() https://www.dell.com/support/kbdoc/en-in/000477931/dsa-2026-231-security-update-for-dell-aiops-collector-for-default-credential-vulnerability - Vendor Advisory, Mitigation

18 Jun 2026, 17:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-17 17:16

Updated : 2026-06-23 13:44

NVD link : CVE-2026-32652

Mitre link : CVE-2026-32652

CVE.ORG link : CVE-2026-32652

JSON object : View

Products Affected

dell

aiops_collector

CWE

CWE-1392

Use of Default Credentials

{"id": "CVE-2026-32652", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-32652", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-18T15:24:23.267897Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "AIOps", "versions": [{"status": "affected", "version": "0", "lessThan": "1.18.3 or later", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-17T17:16:45.103", "references": [{"url": "https://www.dell.com/support/kbdoc/en-in/000477931/dsa-2026-231-security-update-for-dell-aiops-collector-for-default-credential-vulnerability", "tags": ["Vendor Advisory", "Mitigation"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-1392"}]}], "descriptions": [{"lang": "en", "value": "Dell AIOps Collector versions prior to 1.18.3 contain a \"Use of Default Credentials\" vulnerability. A low privileged attacker with console access could potentially exploit this vulnerability to gain Filesystem access. This vulnerability only affects fresh installations of Collector versions earlier than 1.18.3. Systems that have been upgraded (either manually or automatically) to version 1.18.3 or later are not impacted, even if they were originally installed on an earlier version."}], "lastModified": "2026-06-23T13:44:14.437", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:aiops_collector:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E5832A4-C917-4CD9-8BE2-642716C84B33", "versionEndExcluding": "1.18.3"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}