Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-23855

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Spec

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell iDRAC9

Default version status: unaffected

  • 0 to < 7.30.10.50 or lateraffected
  • 0 to < 7.00.00.184 or lateraffected

Dell iDRAC10

Default version status: unaffected

  • 0 to < 1.30.30.50 or lateraffected

References