{"id":"CVE-2026-26948","state":"PUBLISHED","title":"Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Du","description":"Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.","publishedAt":"2026-03-18T17:40:25.370Z","updatedAt":"2026-03-18T18:14:17.609Z","severity":{"score":4.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","source":"dell"},"assigner":"dell","products":["Dell Integrated Dell Remote Access Controller"],"affected":[{"vendor":"Dell","product":"Integrated Dell Remote Access Controller","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"7.00.00.174 or later","versionType":"semver"},{"version":"0","status":"affected","lessThan":"7.10.90.00 or later","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000434533/dsa-2026-113-security-update-for-dell-idrac9-and-idrac10-vulnerabilities"],"weaknesses":["CWE-1258"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/26xxx/CVE-2026-26948.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-26948","state":"PUBLISHED","datePublished":"2026-03-18T17:40:25.370Z","dateUpdated":"2026-03-18T18:14:17.609Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-02-16T18:04:20.509Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure."}],"affected":[{"vendor":"Dell","product":"Integrated Dell Remote Access Controller","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"7.00.00.174 or later","versionType":"semver"},{"version":"0","status":"affected","lessThan":"7.10.90.00 or later","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000434533/dsa-2026-113-security-update-for-dell-idrac9-and-idrac10-vulnerabilities","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":4.9,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1258","lang":"en","description":"CWE-1258: Exposure of Sensitive System Information Due to Uncleared Debug Information","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-03-18T17:40:25.370Z"},"datePublic":"2026-03-17T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.1"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-18T18:14:09.792721Z","id":"CVE-2026-26948","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-18T18:14:17.609Z"}}]}}}