Information Disclosure Vulnerability in Dell PowerEdge Server BIOS and iDRAC9
CVE-2025-26482

4.9MEDIUM

Key Information:

Vendor

Dell
Status
Poweredge R770
Poweredge R670
Poweredge R570
Poweredge R470
Vendor
CVE Published:
25 September 2025

What is CVE-2025-26482?

The Dell PowerEdge Server BIOS and Dell iDRAC9 are susceptible to a vulnerability that allows high-privileged attackers with remote access to potentially exploit the system. This could lead to unauthorized information disclosure, exposing sensitive data. Proper security measures and prompt updates are crucial to mitigating this risk.

Affected Version(s)

Dell EMC NX440 < 2.18.0

Dell EMC Storage NX3240 < 2.23.0

Dell EMC Storage NX3340 < 2.23.0

References

https://www.dell.com/support/kbdoc/en-us/000370138/dsa-20...
vendor-advisory

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-26482 : Information Disclosure Vulnerability in Dell PowerEdge Server BIOS and iDRAC9