EUVD-2026-66655
GHSA-526f-3hr4-7wmf
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Description indicates unauthorized data access (confidentiality), so C:H replaces vendor's I:H; AC:H and PR:N retained from vendor vector as they are consistent with an unauthenticated bypass requiring specific conditions.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Lifecycle Timeline
3DescriptionCVE.org
Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data.
AnalysisAI
Improper access control in Dell iDRAC9 allows an unauthenticated remote attacker to access unauthorized data under high-complexity conditions. Affected generations are 14G firmware prior to 7.00.00.182 and 15G/16G firmware prior to 7.20.30.50. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network-level access to the iDRAC9 management interface (typically TCP port 443 for the web UI or Redfish API, or UDP 623 for IPMI). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 5.9 (Medium) reflects a notable tension in the signal set: the vector is network-accessible and requires no authentication (AV:N/PR:N/UI:N), which is inherently serious for a management controller, but AC:H indicates the attack requires specific conditions to succeed, moderating the automated exploitability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with network access to an iDRAC9 management interface - for instance via a misconfigured management VLAN or an internet-exposed BMC port - satisfies specific high-complexity preconditions (exact nature not disclosed) and issues a crafted unauthenticated request that bypasses access controls to retrieve sensitive management data such as credentials, configuration details, or hardware telemetry. No public exploit code has been identified at time of analysis, but the Authentication Bypass tag indicates the bypass mechanism is categorically exploitable rather than requiring exploitation of a memory safety flaw. |
| Remediation | The primary fix is to upgrade iDRAC9 firmware to version 7.00.00.182 or later for 14G servers, and to version 7.20.30.50 or later for 15G/16G servers, as detailed in Dell advisory DSA-2026-374 at https://www.dell.com/support/kbdoc/en-us/000502514/dsa-2026-374-security-update-for-dell-idrac9-vulnerability. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a sessi
Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. Rat
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today