Dell IDRAC10 vulnerabilities

2 CVEs affecting Dell IDRAC10, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-23855, published 2026-09-09.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-23855, published 2026-09-09. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used…
• CVE-2026-70412, published 2026-08-17. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote…