CVE-2026-23855 — Dell / iDRAC9

Description (CNA)

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command injection.

Affected (CNA)

Vendor / product	Versions
Dell / iDRAC9	affected 0 before 7.30.10.50 or later; affected 0 before 7.00.00.184 or later
Dell / iDRAC10	affected 0 before 1.30.30.50 or later

CWE

CWE-78

References

https://www.dell.com/support/kbdoc/en-us/000504998/dsa-2026-392-security-update-for-dell-idrac9-and-idrac10-vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.