CVE-2020-26198: Dell IDRAC9 Firmware

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.

Affected products

• Dell IDRAC9 Firmware: up to and including 4.32.10.00; version 4.40.00.00 only

Published 2020-12-16. Last modified 2026-06-17.