CVE-2026-23855
High
Description
Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command injection.
SeverityHigh
CVSS7.2
Exploit probability—
ProductiDRAC9
PublishedSep 9, 2026
First seenSep 9, 2026
Weakness typeCWE-78OS command injection
How to fix
Update
- Dell iDRAC97.30.10.50 or later, 7.00.00.184 or later or later
- Dell iDRAC101.30.30.50 or later or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell iDRAC9 | v < 7.30.10.50 or later, v < 7.00.00.184 or later | 7.30.10.50 or later, 7.00.00.184 or later |
| Dell iDRAC10 | v < 1.30.30.50 or later | 1.30.30.50 or later |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.