PT-2026-35868 · Dell · Idrac10

Published 2026-04-29 · Updated 2026-04-29 · CVE-2026-35155

Mitre

CVSS v3.1

7.1

High

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2026-35155

Affected Products

Idrac10

References · 3

• https://dell.com/support/kbdoc/en-us/000452298/dsa-2026-187-security-update-for-dell-idrac10-vulnerability · Vendor Advisory
• https://twitter.com/KaitanSecurity/status/2049360537037701533 · Twitter Post
• https://twitter.com/CVEnew/status/2049350417923096986 · Twitter Post