Improper Access Control in Dell iDRAC9 Affects Remote Server Management
CVE-2026-79940

5.9MEDIUM

Key Information:

Vendor

Dell
Status
Idrac9
Vendor
CVE Published:
26 August 2026

What is CVE-2026-79940?

The Dell iDRAC9 contains an improper access control vulnerability that could allow an unauthenticated attacker with remote access to exploit the system. Successful exploitation of this flaw might result in unauthorized access to sensitive data, putting critical system information at risk. It is crucial for users to upgrade affected versions to ensure their systems remain secure.

Affected Version(s)

iDRAC9 0 < 7.20.30.50 or later

iDRAC9 0 < 7.00.00.182 or later

References

https://www.dell.com/support/kbdoc/en-us/000502514/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.