Dell Remote Access Controller Vulnerabilities

CERT-Bund Security Advisories

Published March 17th, 2026

Detected March 18th, 2026

Summary

CERT-Bund has issued a security advisory regarding multiple vulnerabilities in Dell Remote Access Controller (iDRAC) versions. The vulnerabilities could allow attackers to execute arbitrary code or disclose sensitive information. Mitigation is available.

View original document View source feed page

What changed

CERT-Bund has released advisory WID-SEC-2026-0766 detailing multiple vulnerabilities affecting Dell integrated Dell Remote Access Controller (iDRAC) versions. These vulnerabilities have a CVSS Base Score of 5.3 and a Temporal Score of 4.6, both rated as medium. Successful exploitation could lead to arbitrary code execution or disclosure of confidential information.

Affected systems include specific versions of Dell integrated Dell Remote Access Controller 9 and 10. While the advisory indicates mitigation is available, specific actions for remediation are not detailed within this notice. Organizations utilizing these Dell server management controllers should consult the advisory for detailed affected versions and recommended mitigation steps to prevent potential security breaches.

What to do next

Review affected Dell iDRAC versions against advisory WID-SEC-2026-0766
Implement available mitigation steps for identified vulnerabilities

Source document (simplified)

[WID-SEC-2026-0766] Dell integrated Dell Remote Access Controller: Mehrere Schwachstellen CVSS Base Score 5.3 (mittel) CVSS Temporal Score 4.6 (mittel) Remoteangriff ja Datum 17.03.2026 Stand 18.03.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

Sonstiges

Produktbeschreibung

Der integrierte Dell Remote Access Controller (iDRAC) ermöglicht eine Out-of-Band-Verwaltung auf bestimmten Dell-Servern.

Produkte

17.03.2026
- Dell integrated Dell Remote Access Controller 9 <7.00.00.181

Dell integrated Dell Remote Access Controller 9 <7.20.10.50
Dell integrated Dell Remote Access Controller 9 <7.00.00.174
Dell integrated Dell Remote Access Controller 9 <7.10.90.00
Dell integrated Dell Remote Access Controller 10 <1.20.25.00

Angriff

Ein Angreifer kann mehrere Schwachstellen in Dell integrated Dell Remote Access Controller ausnutzen, um beliebigen Programmcode auszuführen oder um vertrauliche Informationen offenzulegen. CVE Informationen Versionshistorie Feedback zum Advisory geben