PT-2026-7810 · Dell · Dell Idrac Service Module (Ism) For Windows+1

Published 2026-02-12 · Updated 2026-02-12 · CVE-2026-23856

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell iDRAC Service Module (iSM) for Windows versions prior to 6.0.3.1 Dell iDRAC Service Module (iSM) for Linux versions prior to 5.4.1.1

Description Dell iDRAC Service Module (iSM) for Windows and Linux contains an Improper Access Control issue. A local attacker with low privileges could potentially exploit this, leading to Elevation of privileges.

Recommendations Dell iDRAC Service Module (iSM) for Windows versions prior to 6.0.3.1 should be updated to version 6.0.3.1 or later. Dell iDRAC Service Module (iSM) for Linux versions prior to 5.4.1.1 should be updated to version 5.4.1.1 or later.

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-23856

Affected Products

Dell Idrac Service Module (Ism) For Linux

Dell Idrac Service Module (Ism) For Windows

References · 5

• https://dell.com/support/kbdoc/en-us/000426282/dsa-2026-077-security-update-for-dell-idrac-service-module-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23856 · Security Note
• https://t.me/cveNotify/151800 · Telegram Post
• https://twitter.com/CVEnew/status/2021799450906439862 · Twitter Post
• https://t.me/CVEtracker/44497 · Telegram Post