Advisoriesby IbisDell TechnologiesCVE-2026-79940
Dell Technologies iDRAC9: improper access control
Fix: upgrade to 7.20.30.50 or later or later (2 fixed versions below)
Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| iDRAC9 Product | < 7.20.30.50 or later | 7.20.30.50 or later |
| < 7.00.00.182 or later | 7.00.00.182 or later |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-284