Vulnerability record/PUBLISHED/Published Oct 28, 2026 11:55:34 UTC

CVE-2026-81472

Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Base score4.2/ 10

SeverityMediumCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityMedium

Attack vectorLocalAV

Attack complexityLowAC

Privileges requiredHighPR

User interactionNoneUI

ScopeUnchangedS

Confidentiality impactLowC

Integrity impactLowI

Availability impactLowA

CVSS vector stringCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authoritydell

Last updatedOct 28, 2026 11:55:34 UTC

PublishedOct 28, 2026 11:55:34 UTC

ReservedAug 26, 2026 20:04:54 UTC

Credits

Dell would like to thank Nir Yehoshua of Cipher Security Labs for reporting this issue.