Live › vulnerability › CVE-2026-81472
Go to dashboardDell iDRAC Service Module (iSM) for Windows, Linux and ESXi contains a code injection flaw in versions before 6.1.1.0. A high-privileged local attacker can exploit it to elevate privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 12:32 UTC. All times on this page are UTC.
Hosts running Dell iDRAC Service Module (iSM) for Windows, Linux or ESXi at versions prior to 6.1.1.0. The attacker must already hold high privileges with local access on the host, so systems without iSM installed or with the module at 6.1.1.0 or later are not affected.
No product ranges from the sources yet.
6.1.1.06.1.1.0 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-81472")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.