VULNERABILITY INTELLIGENCE
CVE-2026-35155
CVSS score7.1 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-04-29
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.
Weakness classification
- security_alert@emc.com: CWE-522
Primary references
- security_alert@emc.com — Vendor Advisory