CVE-2026-26948: medium-severity vulnerability in Dell Integrated Dell Remote Access Controller
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Dell's remote management tool (iDRAC) leaves debug information accessible to attackers with high privileges, potentially exposing sensitive system details. This could help attackers understand system vulnerabilities and plan further attacks.
Uncleared debug information in Dell iDRAC versions 9 (pre-7.00.00.174), 15G/16G (pre-7.10.90.00) permits information disclosure to high-privileged remote attackers. The vulnerability stems from inadequate sanitization of debug artifacts, enabling exposure of sensitive system configuration and operational data that could facilitate privilege escalation or lateral movement.
In the same product, most dangerous first.