7.8
High
CVE-2026-23856 Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux,…
Description
Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux, versions prior to 5.4.1.1, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iDRAC Service Module 6.0 | earliest → < 6.0.3.1 | 6.0.3.1 |
| iDRAC Service Module 5.4 | earliest → < 5.4.1.1 | 5.4.1.1 |
| iDRAC Service Module for Linux 5.4 | earliest → < 5.4.1.1 | 5.4.1.1 |