CVE-2026-80358

Severity: medium (CVSS 5.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-28 · updated 2026-09-28
Weakness: CWE-1191

Description

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected products

Dell Boot Optimized Server Storage (BOSS): before 2.2.13.2038 — fixed in 2.2.13.2038

How to fix

Upgrade to a fixed version: Dell Boot Optimized Server Storage (BOSS) 2.2.13.2038. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000513073/dsa-2026-402-security-update-for-dell-boot-optimized-server-storage-boss-vulnerability

Get alerted when CVE-2026-80358 or the next vulnerability affects your stack