{"id":"CVE-2026-35155","aliases":["EUVD-2026-26193","GHSA-wq6f-p29f-9pgv"],"status":"published","title":"Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected...","description":"Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0022,"percentile":0.12667,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-522"],"published":"2026-04-29T03:50:56Z","modified":"2026-10-26T20:10:00Z","products":[{"vendor":"dell","product":"idrac10"},{"vendor":"dell","product":"idrac10_firmware"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000452298/dsa-2026-187-security-update-for-dell-idrac10-vulnerability","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35155"},{"url":"https://github.com/advisories/GHSA-wq6f-p29f-9pgv"}],"sources":{"cve":[{"id":"CVE-2026-35155","description":"Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.","status":"published","published":"2026-04-29T03:50:56.69Z","modified":"2026-04-30T03:55:52.264Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:20:05.505362Z"}],"euvd":[{"id":"EUVD-2026-26193","description":"Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.","status":"published","published":"2026-04-29T03:50:56Z","modified":"2026-04-30T03:55:52Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:05:19.555165Z"}],"ghsa":[{"id":"GHSA-wq6f-p29f-9pgv","title":"Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected...","description":"Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.","status":"published","published":"2026-04-29T06:33:30Z","modified":"2026-04-29T06:33:35Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T15:07:51.219984Z"}],"nvd":[{"id":"CVE-2026-35155","description":"Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.","status":"published","published":"2026-04-29T05:16:04.523Z","modified":"2026-10-26T20:10:00.16Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:12:16.626888Z"}]}}