Skip to content
Sign in
7.2 High

CVE-2026-23855 Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions…

Description

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command injection.

Affected products and versions

Product Affected versions Fixed in
iDRAC9 Versions not published
iDRAC10 Versions not published

Other CVEs of iDRAC9

The 4 CVEs of iDRAC9 →
CVE-2026-79940 Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access… 5.9 Medium CVE-2026-70412 Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data… 3.5 Low CVE-2025-26482 Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability 4.9 Medium
Track this CVE