CVE-2026-70412

Dell / iDRAC9 PUBLISHED

Description (CNA)

Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Affected (CNA)

Vendor / product	Versions
Dell / iDRAC9	affected 0 before 7.20.30.50 or later
Dell / iDRAC10	affected 0 before 1.20.60.50 or later

CWE

CWE-1330

References

https://www.dell.com/support/kbdoc/en-us/000497902/dsa-2026-348-security-update-for-dell-idrac9-and-idrac10-vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.