Dell IDRAC10 Firmware vulnerabilities

2 CVEs affecting Dell IDRAC10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-35155, published 2026-04-29.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-22397, published 2025-11-06. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G…
• CVE-2026-35155, published 2026-04-29. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated…