CVE-2026-80358 describes an improper access control vulnerability in the On-Chip Debug and Test Interface of the SMCU on 17G BOSS-N1 controllers in Dell Boot Optimized Server Storage (BOSS). Versions prior to 2.2.13.2038 are affected. An unauthenticated attacker with physical access could exploit this vulnerability to gain unauthorized access. The CVSS v3.1 score is 5.1, reflecting medium severity with low attack vector (physical), high attack complexity, no privileges required, and user interaction required. Confidentiality impact is low, integrity impact is high, and availability impact is low.

An attacker with physical access to the affected hardware could exploit this vulnerability to gain unauthorized access, potentially compromising system integrity. The confidentiality impact is low, but integrity impact is high, and availability impact is low. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor Dell's advisories for updates. Physical access controls should be enforced to reduce risk.