{"id":"CVE-2026-26945","state":"PUBLISHED","title":"Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 1","description":"Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain a Process Control vulnerability.  A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to code execution.","publishedAt":"2026-03-18T17:27:23.742Z","updatedAt":"2026-03-18T18:13:41.928Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L","source":"dell"},"assigner":"dell","products":["Dell Integrated Dell Remote Access Controller"],"affected":[{"vendor":"Dell","product":"Integrated Dell Remote Access Controller","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"7.00.00.181 or later","versionType":"semver"},{"version":"0","status":"affected","lessThan":"7.20.10.50 or later","versionType":"semver"},{"version":"0","status":"affected","lessThan":"1.20.25.00 or later","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000434533/dsa-2026-113-security-update-for-dell-idrac9-and-idrac10-vulnerabilities"],"weaknesses":["CWE-114"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/26xxx/CVE-2026-26945.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-26945","state":"PUBLISHED","datePublished":"2026-03-18T17:27:23.742Z","dateUpdated":"2026-03-18T18:13:41.928Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-02-16T18:04:20.508Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain a Process Control vulnerability.  A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to code execution."}],"affected":[{"vendor":"Dell","product":"Integrated Dell Remote Access Controller","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"7.00.00.181 or later","versionType":"semver"},{"version":"0","status":"affected","lessThan":"7.20.10.50 or later","versionType":"semver"},{"version":"0","status":"affected","lessThan":"1.20.25.00 or later","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000434533/dsa-2026-113-security-update-for-dell-idrac9-and-idrac10-vulnerabilities","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"LOW","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-114","lang":"en","description":"CWE-114: Process Control","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-03-18T17:27:23.742Z"},"datePublic":"2026-03-17T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.1"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-18T18:11:54.657488Z","id":"CVE-2026-26945","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-18T18:13:41.928Z"}}]}}}