CVE-2026-81472: Code Injection
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell iDRAC Service Module (iSM) for Windows, Linux, and ESXito a version that resolves this vulnerability.Fixed in 6.1.1.0
Event History
Frequently Asked Questions
Which deployments are affected?
Dell iDRAC Service Module installations on Windows, Linux, or ESXi are affected if they run a version earlier than 6.1.1.0.
What access does an attacker need to exploit this issue?
Exploitation requires local access and high privileges on the affected system. The vulnerability could then be used for elevation of privileges.
What version should be used to remediate the issue?
Update Dell iDRAC Service Module to version 6.1.1.0 or later. The affected versions are those prior to 6.1.1.0.