CVE-2026-81472
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
28/100
Published: 2026-10-28
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
High
UI:
None
S:
Unchanged
C:
Low
I:
Low
A:
Low
Description
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Weakness Classification (1)
Affected Software (15)
| Vendor | Product | Version |
|---|---|---|
| Dell | iDRAC Service Module for ESXi | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for ESXi | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for ESXi | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for ESXi | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for ESXi | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Linux | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Linux | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Linux | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Linux | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Linux | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Windows | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Windows | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Windows | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Windows | 0 < 6.1.1.0 or later |
| Dell | iDRAC Service Module for Windows | 0 < 6.1.1.0 or later |