Dell

Dell Idrac9: vulnerabilities and CVEs

Dell Idrac9 has 5 published vulnerabilities, 3 of them in the last 12 months. 2 are rated critical and 0 are listed by CISA as actively exploited.

CVEs5

Last 12 months3

Critical2

Actively exploited0

Latest vulnerabilities

CVE	Severity	EPSS	Active exploitation	Published	Description
CVE-2026-23855	High (7.2)	0.93%	—	Sep 9, 2026	Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS…
CVE-2026-79940	Medium (5.9)	0.29%	—	Aug 26, 2026	Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this…
CVE-2026-70412	Low (3.5)	0.27%	—	Aug 17, 2026	Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially…
CVE-2024-25943	Critical (9.8)	0.66%	—	Jun 29, 2024	iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability,…
CVE-2022-24422	Critical (9.8)	59%	—	May 26, 2022	Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the VNC…

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.